TAKE THIS TO WORK
Design data protection across collection, use, access and retention.
General information checked on 17 October 2026. Obtain qualified advice on the specific case; this article is not legal advice.
A checkbox does not choose a legal basis.
The GDPR provides several legal bases. Consent is one. The appropriate basis depends on the processing and context. A contact request and promotional messages have distinct purposes to assess; one checkbox does not automatically authorise every use.
Collect what is needed.
Our simulated enquiry asks for a reply route and a project description. Before adding a date of birth, ID or attachment, identify the actual need. Data minimisation and storage limitation are GDPR principles.
Trace the destination of the data.
Map the application, email, business system and service providers. Who reads the enquiry, what copies arise and how long do they remain? Notices, configuration and arrangements need to reflect actual processing. Legal assessment requires knowledge of the particular case.
Ask for a practical check.
Trace an enquiry with invented data and test role permissions. Examine intended retention and deletion, including relevant copies. A Privacy page alone does not establish how the system operates.
ARXE Studio implements agreed requirements for forms, roles and workflows with the company and its advisers. Technical implementation is not a compliance certification.
| Decision | Useful question | Project check |
|---|---|---|
| Collection | Is this field necessary? | Purpose and fields |
| Access | Who needs this enquiry? | Roles and copies |
| Retention | Why and for how long? | Rules and copy handling |
Make the call.
Must requesting a quote also require signing up for promotions?
Choose an answer to see the reasoning.
Local, deterministic example. No data sent and no AI model called.
Sources and further reading
How this content is made
Text prepared with AI assistance. Original examples and mini-checks are simulated and show no clients or measured results. The fictional characters are not the authors.
ARXE STUDIO / TAKE THIS TO WORK
Need a form that fits the work and the data?
Describe collected information, destination systems and roles requiring access.
Discuss your workflowNext episode: AI penalties depend on the infringement.