Privacy policy.

[The privacy policy must be written before launch: data controller, what data the forms collect (including CVs), purpose, retention period, who has access (for example Netlify as data processor), and how to request access or deletion.]