Scope
This notice explains how CliniFlows handles personal information when people visit the website, create an account, work in a CliniFlows workspace, or contact support.
CliniFlows is designed for clinical guidance and operational pathway content. It is not a patient record system and users must not upload patient-identifiable records.
Information we handle
We handle the information needed to provide and secure the service.
- Account information such as name, email address, authentication identifiers, and workspace membership.
- Workspace information such as pathways, comments, ownership, review state, version history, and publication settings.
- Documents temporarily uploaded to build pathway drafts; uploads and extracted text are deleted after processing.
- Technical information such as device, browser, IP address, request logs, and security events.
- Support communications sent to support@cliniflows.co.uk.
How information is used
Information is used to provide authentication, workspace access, pathway authoring and publishing, temporary document conversion, customer support, service security, fault investigation, and legal compliance. We do not use uploaded clinical guidance to make patient-specific decisions.
Retention and deletion
Temporary document uploads and extracted text are deleted when processing finishes, fails, or is cancelled. Generated pathway drafts remain in the workspace. Other information is retained for as long as an account or workspace needs the service and for a reasonable period afterwards where required for security, backup, dispute, or legal purposes. Account and workspace deletion requests may be subject to organisational ownership and governance requirements.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the use of personal information. You may also have a right to data portability or to complain to a data protection authority.
Contact
For privacy questions or requests, email support@cliniflows.co.uk. This draft remains under legal review and will be updated when the final controller and representative details are confirmed.