Privacy

Privacy by default

Draft for legal review before launch. Replace operator/contact details and confirm the actual hosting/analytics setup.

The current design intentionally avoids user accounts and avoids collecting health profiles. The support navigator should process selections locally in the browser.

Information we intend not to request

Names for using the navigator
PPS numbers
Medical records or diagnostic reports
Exact home addresses
Children's identities

Analytics

Launch with no non-essential analytics unless there is a clear need. If analytics or other non-essential tracking is introduced, implement consent and withdrawal controls before loading it.

Contact forms

Do not add a general “tell us your story” form in this release. If a correction/contact form is introduced, ask only for the minimum information needed and publish a retention rule.

Operator information

[CONTENT GAP: legal operator name, postal/contact details, data-protection contact, hosting provider, retention policy.]