A complaint form that only says ‘message’ produces novels without dates. The form should ask what happened, when, and how to reach the person, then run your real complaints SOP—including NHS or US payer grievance routes when those apply.
Not a shared marketing inbox if you can avoid it.
Match your SOP categories.
A human reply beats an auto-receipt that promises nothing.
The form is intake. The case file lives in your complaints log.
A complaint form is the structured start of a grievance: identity of the complainant, what service failed, when, and the outcome they want. UK NHS complaints have statutory and NHS England/ICB processes; a private clinic’s website form does not replace those. US health plans and hospitals have their own grievance and CMS/state rules. A law firm or gym can still use A form for ordinary service complaints.
The request pack’s details field is the narrative. Preferred date can mean ‘date of incident’. Request type can be relabelled to ‘billing’, ‘clinical’, ‘staff conduct’, ‘other’.
You cannot investigate ‘they were rude’ with no date, site, or staff role.
Do not ask for SSN, NI, or passport scans to ‘verify the complaint’. Match them to an existing file with questions only they would know, or via a logged-in portal.
Regulators still exist. Your form is local intake.
A form on /complaints.
Tell UK NHS patients how to complain to the provider and how PHSO/ICB routes work. Do not imply this HTML is the statutory scheme.
Health-plan members often must use the insurer’s process for coverage denials.
Keep those addresses in your policy. The form is step one inside your organisation.
Publish timescales (for example, when you will acknowledge). UK organisations often already quote those in a complaints policy PDF—put the same numbers next to the form.
HIPAA: a US clinic complaint may contain PHI. Limit dashboard access. UK GDPR: complaints are personal data and sometimes health data.
It can start a private or local complaint. NHS-funded care still has official routes you must signpost.
You can make name optional on the form. You will struggle to reply or to verify facts.
Treat as confidential HR/clinical governance. Do not forward the raw row around Slack.
Prefer a later secure channel. Public file fields fill up with other people’s letters and ID by accident.
Typed acknowledgement of activity risks for gyms, events, and classes—not a magic shield against negligence.
Post-activity or settlement-style release language captured as a web acknowledgement.
Permission to use a person’s image in marketing, with named event and typed signature.