Information requested
The site may request names, relationship, service address, phone, email, preferred contact method, general assistance topics, desired days and times, consultation windows, operational comments, referral source, and campaign attribution.
Information not requested
Do not submit diagnoses, medications, prescriptions, Social Security numbers, insurance/member identifiers, medical records, physician records, treatment plans, or detailed health histories. Detected prohibited details are rejected before the request is sent to Hollyhock.
How a submission is used
The Holly Randels website validates the request and sends it through a signed, server-to-server connection. Hollyhock records the lead or consultation request, source attribution, alerts, follow-up state, and audit evidence. A consultation request is not a confirmed appointment.
Security and abuse controls
The public form uses same-origin request protection, rate limits, time-bound form challenges, replay protection, strict field limits, prohibited-content checks, and a first-party HMAC signature. Security records store privacy-keyed network digests rather than raw IP addresses.
Retention and access
Form security records contain no lead content and are pruned after their operational window. Lead and consultation retention in Hollyhock must follow the approved business and legal retention schedule. Access is limited by authenticated, server-enforced roles.
Questions
Privacy questions may be sent to Hollyrandels@outlook.com.