Last reviewed 4 May 2026

CRM public intake SAT and cookies notice

This notice records the storage and access technology position for the CRM public patient intake and public appointment booking routes.

Current position

CRM public routes use essential security/session technologies for CSRF, rate limiting, form submission, appointment booking, and reCAPTCHA risk checks where configured. Optional analytics, advertising, advertising measurement, cross-site tracking, behavioural profiling, and social tracking are not approved for pre-consent loading on these public intake routes.

Required evidence before full approval

  • Inventory every cookie, localStorage, sessionStorage, pixel, tag, SDK, iframe, and similar technology.
  • Name the exception or consent basis for each technology.
  • Prove non-exempt technologies do not load before consent.
  • Record reCAPTCHA and email supplier evidence, transfer safeguards, and objection/withdrawal routes where required.