Make clearer what is done with personal data at the point where it is entered

[crowbot]

We should explicitly link to the privacy policy, or include some text that briefly explains what happens to personal data - as we do on WhatDoTheyKnow and FixMyStreet.

[zarino]

I’d sort of like to do this:

(Wording courtesy of @MyfanwyNixon)

The code for which is:

<fieldset class="last">
    <input name="mysociety_serialized_variables" value="…" type="hidden">
    <div style="color: #666;font-size: 14px;margin-bottom: 2.5em;margin-top: -1em;">
        <p style="margin-bottom: 1em;">All the information you provide here will be sent to your representative or their office.</p>
        <p style="margin-bottom: 1em;">Any response from them will come directly to you via email. After you use WriteToThem, you will receive a maximum of two follow-up messages from us, checking whether you received a response.</p>
        <p><a href="/about-privacy">Read about how we keep your data private, in a new window</a>.</p>
    </div>
    <p>
        <label style="font-size: 1em;">
            <input class="button radius success" name="submitPreview" value="Preview and send" type="submit">
        </label>
    </p>
</fieldset>

But:

1. I am a bit worried about adding it to write.php because that also talks about cobrands, and I don’t know whether we want to roll this change out to all cobrands?
2. I can’t get my local dev environment (just running an Apache+PHP server in the /web directory) working, so testing it out is going to be a pain.

Any chance @dracos would have time for this?

[dracos]

"I don’t know whether we want to roll this change out to all cobrands?" We have no cobrands, and they would want it if we did. Just stick the HTML in what you think is the right place, it'll be fine.

[zarino]

Ok @dracos – PR here! https://github.com/mysociety/writetothem/pull/400