Privacy Policy
Last updated: December 2024
Overview
CliniSearch is committed to protecting the privacy of our users. This privacy policy explains how we collect, use, and protect your information.
Information We Collect
- • Account information (email, name, organisation)
- • Search queries and usage data
- • Technical data (IP address, browser type, device information)
How We Use Your Information
- • To provide and improve our services
- • To respond to support requests
- • For audit and compliance purposes (Enterprise customers)
Data Security
We implement appropriate technical and organisational measures to protect your data. All data is stored securely and access is restricted to authorised personnel only.
Legal basis & retention
We process data to deliver the CliniSearch service (performance of a contract), to improve safety and reliability (legitimate interest), and to meet compliance obligations. Usage and audit data for enterprise customers is retained in line with contractual terms; clinician accounts retain core profile data while your account is active.
We minimise what we store, apply role-based access, and periodically review access logs. If you delete your account, we will remove personal data that is not required for legal or compliance reasons.
Sharing your data
We do not sell your data. We share limited information with trusted providers (hosting, analytics, email delivery) under data processing agreements. For enterprise deployments, audit exports may be shared with your organisation for governance purposes.
Where possible, data stays in the UK or EU. If data is processed elsewhere, we rely on appropriate safeguards such as Standard Contractual Clauses.
Cookies and analytics
We use essential cookies to keep you logged in and maintain session security. We may use privacy-focused analytics to understand feature usage and improve performance; you can disable non-essential cookies in your browser settings.
Your rights
You can request access to your data, ask for corrections, object to certain processing, or request deletion where applicable. Contact us at admin@clinisearch.co.uk to exercise these rights.
Enterprise & governance
Audit logs for enterprise customers include user identity, IP address, user agent, correlation ID, and the guideline sections used to generate answers. These logs are available to authorised governance teams to satisfy CQC, IG, or clinical safety reviews.
Contact Us
For privacy-related questions, please contact us at: admin@clinisearch.co.uk