Privacy and safety

Share only information needed for CSAT to understand and respond. This channel is not an emergency service; contact the appropriate local emergency service if someone faces immediate danger.

The feedback form makes identity and contact optional and records reply consent separately from whether proactive contact is safe. Public attachments are disabled. Submitted narratives and contact details are encrypted, and highly sensitive submissions leave the ordinary staff workflow immediately.

Tracking requires both a random reference and recovery secret. The secret is shown only with the successful receipt, cannot be recovered by staff and is exchanged by POST for a short-lived session. Tracking shows only a generic status and explicitly approved messages.

No public staff registration is available. Staff access, programme membership and workflow permissions require approved, expiring assignments.