Operator and contact
The legal operator and privacy contact must be supplied before public launch. This draft describes the implemented enquiry workflow and requires operator approval.
Information collected
The initial form requests basic contact details, country, contact preference, language, preferred time and an optional short message. Do not provide clinical records or identification documents.
Use and access
Enquiry information is used to respond to the request. Access is limited to authorised staff. Contact information and messages are encrypted at rest in the application database. No advertising trackers are included by default.
Retention and requests
Retention is configurable and defaults to 90 days. The operator must approve the period and provide a contact for access or deletion requests. Automated deletion requires the scheduled task to be running.
Third-party communication
If WhatsApp or another external channel is enabled, its provider handles data under its own policies. Essential session cookies support forms and security. Optional analytics should only be enabled after an appropriate privacy review.