/* Shared by /privacy and /health-data. Same tokens as the homepage, plainer layout:
   these are documents, so they are a single readable column and nothing moves. */
*{box-sizing:border-box}
html,body{margin:0}
body{
  background:var(--pn-bg); color:var(--pn-text);
  font-family:var(--pn-font-body); font-size:17px; line-height:1.65;
  -webkit-font-smoothing:antialiased;
}
.wrap{max-width:720px; margin:0 auto; padding:56px 24px 96px}
a{color:var(--pn-accent)}
h1{font-family:var(--pn-font-display); font-weight:600; font-size:34px; line-height:1.2; margin:0 0 8px}
h2{font-family:var(--pn-font-display); font-weight:600; font-size:23px; line-height:1.3; margin:44px 0 10px}
h3{font-size:17px; font-weight:600; margin:28px 0 6px}
p,li{color:var(--pn-text-secondary)}
strong{color:var(--pn-text)}
.lede{font-size:19px}
.meta{color:var(--pn-text-muted); font-size:14px; margin:0 0 32px}
/* The controller's registered address. GDPR Arts. 13-14 want the identity AND a way to
   reach it, and a postal address is the part an email cannot stand in for. Set apart from the
   body so it reads as a record rather than as prose. */
.addr{color:var(--pn-text-muted); font-size:15px; line-height:1.5; margin:0 0 20px}
ul{padding-left:22px}
li{margin:6px 0}
table{border-collapse:collapse; width:100%; margin:16px 0; font-size:15px}
th,td{text-align:left; padding:10px 12px; border-bottom:1px solid var(--pn-border); vertical-align:top}
th{color:var(--pn-text); font-weight:600}
.callout{
  background:var(--pn-surface); border-left:4px solid var(--pn-accent);
  border-radius:var(--pn-radius-card); padding:16px 22px 18px; margin:24px 0;
}
.callout p{margin:0}
.back{display:inline-block; margin-bottom:28px; font-weight:600; text-decoration:none}
footer{margin-top:64px; padding-top:24px; border-top:1px solid var(--pn-border); color:var(--pn-text-muted); font-size:14px}