Creating privacy policy (closes #4)

docs/privacy/index.md

@@ -0,0 +1,43 @@
+---
+hide:
+- toc
+- navigation
+---
+
+# Privacy Policy
+
+We only share the necessary data with necessary partners. For example
+payment processors are legally required to collect some as well as 
+domainregistries.
+
+## FI Domain Registry
+
+To comply with laws we need to collect, process and keep updated following:
+
+- Name
+- Social security number or other identification
+- Postal address
+- Phone number
+- Point-of-contact and phone number (in case of a legal person)
+- EMail address (for processes)
+
+Collecting and processing this information is necessary to provide
+these services. FI-domain must be registered in the name of the user and
+correct user information needs to be marked on the fi-domain registry.
+
+Some of this data can be shared with a payment processor to enable payments.
+
+We are legally allowed to only process this data while we manage your domain
+and/or the domain is active including the grace period. We shall comply and
+remove all your data accordingly after the service ends.
+No action needs to be taken from your part.
+
+## Web Hosting
+
+To provide these services we need some necessary information from you:
+
+- Name
+- EMail address
+
+We shall only keep this data as long as you are a customer. This data can be
+shared with a payment processor to enable payments.