Legal
Privacy Policy
This page is awaiting approved copy. The structure, branding and
navigation are production-ready; the policy text below still needs to be written and
signed off by counsel before launch. Remove the
noindex tag in the page
head once the content is final.
Last updated: pending
What this policy should cover
The headings below are a checklist for whoever drafts the final text. They are not legal advice — confirm scope with counsel, particularly around health data.
- Who the data controller is, and how to contact them
- What information is collected through this site (demo-request form fields, server logs, any analytics)
- Whether any protected health information is involved, and the HIPAA position if so
- Lawful basis for processing, and how consent is obtained
- Who data is shared with — hosting, form handling, email, analytics processors
- International transfers, if any visitors are in the EU or UK
- Retention periods
- Individual rights (access, correction, deletion) and how to exercise them
- Cookie and tracking disclosure — note that this site currently sets no cookies and loads no third-party trackers
- How changes to the policy are communicated