Final legal copy should cover, at minimum:

• Data collected via the booking flow and pharmacy service enquiries.

• Cookies, analytics and marketing measurement used by the site.

• Lawful basis for processing, including healthcare and marketing contexts.

• Retention periods for booking, clinical, consent and marketing records.

• Data subject rights and how patients can exercise them.

• The ICO complaints route and the organisation’s data controller details.

Please provide the approved privacy policy wording, data controller details, DPO or privacy contact, retention schedule, processor list, cookie/analytics tools, and any pharmacy-specific notices that must be included.