Legal and trust

Privacy

How CliniFlows handles information used to provide and protect the service.

Last updated 8 August 2026 Draft under legal review

Scope

This notice explains how CliniFlows handles personal information when people visit the website, create an account, work in a CliniFlows workspace, or contact support.

CliniFlows is designed for clinical guidance and operational pathway content. It is not a patient record system and users must not upload patient-identifiable records.

Information we handle

We handle the information needed to provide and secure the service.

  • Account information such as name, email address, authentication identifiers, and workspace membership.
  • Workspace information such as pathways, comments, ownership, review state, version history, and publication settings.
  • Documents temporarily uploaded to build pathway drafts; uploads and extracted text are deleted after processing.
  • Technical information such as device, browser, IP address, request logs, and security events.
  • Support communications sent to support@cliniflows.co.uk.

How information is used

Information is used to provide authentication, workspace access, pathway authoring and publishing, temporary document conversion, customer support, service security, fault investigation, and legal compliance. We do not use uploaded clinical guidance to make patient-specific decisions.

Service providers and sharing

CliniFlows relies on carefully selected infrastructure and service providers, including hosting, authentication, database, storage, and operational tooling. Information may be shared with those providers only where needed to operate the service, meet legal obligations, protect users, or respond to a valid request.

Retention and deletion

Temporary document uploads and extracted text are deleted when processing finishes, fails, or is cancelled. Generated pathway drafts remain in the workspace. Other information is retained for as long as an account or workspace needs the service and for a reasonable period afterwards where required for security, backup, dispute, or legal purposes. Account and workspace deletion requests may be subject to organisational ownership and governance requirements.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the use of personal information. You may also have a right to data portability or to complain to a data protection authority.

Contact

For privacy questions or requests, email support@cliniflows.co.uk. This draft remains under legal review and will be updated when the final controller and representative details are confirmed.