Plan the form
Before publishing, follow the user’s journey yourself: advert, page, form and response. Decide who receives the enquiry and what communication follows. A short, understandable form makes the journey clearer for the team too.
Where GDPR applies, establish the lawful basis, purpose and privacy information. Collect necessary data and define its retention.
GDPR · Articles 5, 6, 9 & 13 ↗Take care with health information
Health data has specific protections; profiling can also reveal sensitive information. Article 9 conditions must be assessed alongside an Article 6 lawful basis.
As a design choice, separate the initial request for contact from clinical assessment. Keep radiographs, diagnoses and medical histories out of advertising forms and marketing measurement parameters.
EDPB · Guidelines 8/2020 ↗Test the journey before launch
Send a test enquiry, check the recipient and follow it into the CRM. Review fields, team access and automatic messages. Also check what your website’s measurement tools transmit.
This is educational guidance for campaign design. GDPR applicability, local rules and your particular processing setup require assessment by your privacy professional.