This placeholder privacy policy must be replaced with your own before launch. Describe what personal data the contact form and newsletter collect (name, email address, message), why, how long it is kept, and how visitors can request deletion. Note that IP addresses are hashed for rate limiting and not stored.