Before launch, connect the form to an approved secure medical enquiry workflow. Avoid sending sensitive medical information through a standard unsecured contact form.
Patients should be told how their information is stored, who will review it, and when they can expect a response.