Privacy must match what HIRQ actually processes.

The final production privacy notice is published only after the real data flows, vendors, retention periods and rights processes have been checked.