How should enquiry forms handle confidential information?

We keep initial forms short, asking for contact details, matter type and urgency, so sensitive detail is shared once you have run conflict checks. Forms are encrypted and data flows mapped for UK GDPR.