Read-only first
The safest launch model is predominantly read-only. A user should be able to learn about periods, menopause, disability, pregnancy or REDs without Eights and Arrows learning anything about that user’s health.
Data minimisation
If a future form needs information, collect only what is necessary for its defined purpose. For participation support, “What adjustment would help?” will often be more appropriate than asking for a complete diagnosis, medication history or medical record.
Special-category data
Health information and some equality information can be special-category personal data under UK data-protection law. Any processing must have an appropriate Article 6 lawful basis and, where applicable, a valid Article 9 condition, together with appropriate transparency, security and retention arrangements.
Keep purposes separate
Programme feedback, support requests, safeguarding reports, story submissions and newsletter sign-ups should not silently become one combined dataset. Publication consent for a story is also different from ordinary programme feedback.
No raw feedback to public dashboard
Open-text responses may contain names, allegations, health information or unexpected disclosures. Raw responses must never flow automatically to the public website or impact dashboard.
Review note
This page forms part of the Centre’s public governance information. It should be reviewed whenever relevant law, guidance, evidence or Eights & Arrows processes change.