Demo placeholder — not the production privacy policy.
The final page must include the verified controller identity and contact details, processing purposes and legal bases, relevant recipients, retention information and applicable data-protection rights based on the services actually used by the practice.