01
Notice at Collection
Before a contact or sourcing form is submitted, its Personal Information Collection Statement explains the purpose, mandatory and optional fields, expected recipients, relevant rights and enquiry route. A changed purpose requires renewed assessment and an updated notice.
02
Data Minimisation and Separate Consent
Forms request only the corporate contact details needed for identity checks, routing and a response. Marketing consent is not bundled with an enquiry and remains unselected. Patient data, prescriptions and sensitive original documents should not enter a public form.
03
Retention and Contact Arrangements
Records are retained according to the collection purpose, applicable legal duties and reasonable business need, then deleted or anonymised when no longer required. Privacy-related requests can use the website's dedicated privacy enquiry intent.
READ BEFORE ENQUIRING
Conditions requiring case-by-case confirmation
- ✓Only information needed to handle a business enquiry is collected
- ✓Marketing consent must be separate, explicit and unselected by default
NEXT STEP