Your information belongs in careful hands.

An account stores your name, email address, password hash, role, status and verification details. A request stores the name and email you submit, your answers, contact consent, request status and conversation messages. When you submit while signed in, the request is linked to that account’s identifier. Guest requests are not automatically linked later merely because an email address matches.

Please provide only the information needed for your enquiry. The public forms are not intended for medical records, identity numbers, passwords or sensitive documents about another person.

Authorised staff can review enquiries, assign them, record follow-up dates and respond within a linked member conversation. Internal notes are separated from replies visible to the member. Account verification and password reset messages enter a private email queue. Security controls use a session cookie and limited request information to help protect access.

No advertising or analytics tracker is included in this build. Video embeds contact an external provider only after you choose to load a video. That provider then handles information under its own practices. The Reduce motion preference may be stored locally in your browser.

Access permissions limit which staff can manage private records. Website activity logs record selected account and administrative actions. The organisation must approve its retention schedule, hosting and email providers and the contact responsible for information requests before launch.

Use the contact form to ask about your information or request a correction or deletion review. Do not submit identity evidence in the initial request. The team may need an appropriate way to verify a request before changing protected records. No automatic deletion deadline or legal entitlement is asserted by this draft website notice.