Tell a Friend feature records the third party's personal information without warning referer or referee or providing link to Privacy Policy

Under the privacy laws in Australia and other countries such as NZ and in Europe, you must tell people certain things when you are collecting their information, or if you have received their information from a third-party.

Consequently the Tell a Friend feature should either:

(a) provide a Footer area on the Tell a Friend page where an explanation and link to the org's privacy policy can be included, AND a Footer area on the e-mail to the Friend where a link to the org's privacy policy can be included (this could be an additional message template in CiviMail so it can apply to Tell a Friend requests across events, donations etc); or

(b) not store the friend's details in the database until such time as the friend chooses to sign up (at which point they can be shown the link to the privacy policy themselves).