Privacy Policy

1. Who We Are

N-Clinic is operated by Good Strategy Limited, a company registered in England and Wales (Company Number: 14789828). We provide clinic management software for healthcare practitioners.

Contact: privacy@n-clinic.io

2. What Data We Collect

Website Visitors

When you visit our website, we collect:

• Email address (if you join our waitlist)
• IP address (for security and rate limiting)
• Basic analytics data (pages visited, referral source)

Platform Users (Practitioners)

When you use N-Clinic as a practitioner, we collect:

• Account information (name, email, practice details)
• Billing information (processed securely via payment providers)
• Usage data to improve our service

Patient Data

Patient data is entered and controlled by practitioners using our platform. We act as a data processor on behalf of practitioners (the data controllers). Patient data may include names, contact details, medical history, appointment records, and treatment notes.

3. How We Use Your Data

• To provide and maintain our service
• To send you updates about N-Clinic (waitlist subscribers only, maximum 3 emails)
• To process payments and manage subscriptions
• To improve our platform based on usage patterns
• To comply with legal obligations
• To protect against fraud and abuse

4. AI Features and Data Processing

N-Clinic offers AI-powered patient summaries to help practitioners. This processing:

• Happens entirely on our own infrastructure
• Never sends patient data to third-party AI services
• Does not use patient data to train AI models
• Can be disabled at any time by the practitioner

5. Data Storage and Security

We take data security seriously:

• All data is encrypted at rest and in transit
• We use secure, SOC 2 compliant cloud infrastructure
• Access to data is strictly controlled and logged
• Data is stored exclusively within the United Kingdom

6. Data Sharing

We do not sell your data. We may share data with:

• Payment processors (to handle transactions)
• Cloud service providers (to host our platform)
• Law enforcement (when legally required)

All third parties are contractually bound to protect your data and only use it for the specified purposes.

7. Your Rights

Under UK GDPR and data protection laws, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your data
• Portability — Export your data in a standard format
• Object — Object to certain processing activities
• Withdraw consent — Where processing is based on consent

To exercise these rights, contact us at privacy@n-clinic.io. We will respond within 30 days.

8. For Patients

If you are a patient whose data is stored in N-Clinic, your practitioner is the data controller. Please contact them directly to exercise your data rights. If you believe your data is being mishandled, you may also contact us or the Information Commissioner's Office (ICO).

9. Data Retention

• Waitlist emails — Kept until you unsubscribe or our service launches
• Account data — Kept while your account is active, plus 30 days after closure
• Patient data — Retained according to practitioner settings and legal requirements for medical records
• Billing records — Kept for 7 years as required by law

10. Cookies

We use essential cookies to:

• Maintain your session and preferences
• Protect against cross-site request forgery (CSRF)
• Remember if you've seen certain messages

These cookies are necessary for the website to function and cannot be disabled. We do not use tracking or advertising cookies.

11. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. Patient data for minors is managed by practitioners in accordance with applicable healthcare regulations.

12. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email to registered users. The latest version will always be available on this page with the updated date.

13. Contact Us

For privacy-related questions or to exercise your rights:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.