Privacy and patient data

Never submit patient dataCopy link to section

This is the single most important rule in the product.

Do not enter patient names, contact details, identity documents, medical records, diagnoses, treatment plans, prescriptions, clinical photographs, or anything else from which an individual patient could be identified — in any field, form, message, or attachment, at any point.

This applies whether or not the patient has consented. ClinicRadar is not built to hold this data and does not have the controls appropriate to it. Intake forms detect and reject submissions that appear to contain it, and repeated attempts are grounds for suspension under the Acceptable Use Policy.

What ClinicRadar does collectCopy link to section

Publicly accessible material about the businesses you configure: published reviews and ratings, public social posts and mentions, public search results, and public answer-engine responses to prompts you define.

Nothing behind a login, a paywall, or a private group is collected.

Reviewer minimisationCopy link to section

Public reviews are written by people, and a review carries whatever display name its author chose. ClinicRadar minimises this:

• Reviewer names are masked or omitted in analytical screens — themes, scores, trends, and comparisons.
• A name is shown only where you need it to respond to one specific public item.
• No attempt is made to identify a reviewer, link their activity across platforms, or build a profile of them.

The product analyses businesses. It is not a tool for looking into the people who wrote about them, and using it that way breaches the Acceptable Use Policy.

Analytics and session replayCopy link to section

Product analytics is off until you accept it. Automatic capture of clicks and page content is disabled entirely, and every recorded event comes from a fixed, reviewed catalogue.

• You are identified only by an internal identifier — never your email or name.
• URLs are reduced to route templates before being recorded, so no workspace address, clinic identifier, token, or query string is transmitted.
• The content of forms, evidence, and support messages is never transmitted.

Session replay is a separate choice that never follows analytics consent automatically. When it is on, all text and all form inputs are masked before anything is recorded.

Change either choice at any time from the consent manager in the footer, or from Account → Privacy once signed in. Withdrawal takes effect immediately.

Your rightsCopy link to section

Access, correction, export, deletion, restriction, and objection are all available. Export and deletion are self-service inside the product; for anything else, contact the privacy address in the Privacy Policy.