Privacy notice

Information submitted through forms

General contact forms are intended to collect name, contact details, enquiry type, consent and a short message. Visitors are asked not to submit detailed personal or clinical information. The final form processor, retention period, authorised recipients and deletion process must be documented before launch.

Booking-provider data

If an external booking provider is approved, that provider will process booking information under its own privacy terms. The provider, purpose, data location and retention settings must be reviewed and identified here.

Self-reflection tool

The self-reflection runs entirely in the browser. Answers and scores are held only in temporary page memory. They are not submitted to the server, written to localStorage, placed in cookies or sent to analytics. Refreshing the page or choosing “Start again” clears the responses.

Analytics and cookies

No analytics platform is configured in this version. If privacy-conscious analytics are approved later, the implementation must exclude reflection answers, scores, health-related form content and private booking details. Any required cookie notice must reflect the actual tools used.

Social media and external content

External links and future media embeds may allow third parties to process device or usage information. Privacy-enhanced embed modes should be used where available, and third-party services must be listed before launch.

Retention, access and correction

The final policy must state how long enquiry records are kept and how a person can request access, correction or deletion where applicable.

South African privacy context

The final policy should be reviewed for compliance with the Protection of Personal Information Act (POPIA), the practice’s professional obligations and the actual hosting and service-provider arrangements.

Contact

Insert the verified privacy contact person, email address and physical or postal details after approval.