Privacy notice

Who we are

ConsultReview is run by Andre Wallace and Kazeem Lawal, who are together the controller of the personal data described here. You can contact us about anything in this notice at hello@consultreview.co.uk, or by post at ConsultReview, Unit 82a James Carter Road, Mildenhall, Bury St Edmunds, IP28 7DE.

Patient information: what we ask you not to send

ConsultReview is built so that cases can be reviewed without anyone knowing who the patient is. Cases are meant to contain no patient name, date of birth, address, NHS number or any other detail that identifies a patient.

Two features help you keep it that way:

• Redaction happens on your device. When you upload a consultation PDF, you mark identifying details in your browser and we burn those marks permanently into the page image. Only the redacted copy is uploaded. Your original file never leaves your device and is never sent to our servers.
• Conditions are tagged with SNOMED CT. You tag the clinical topic by choosing a standard SNOMED CT description, so the case reaches suitable reviewers without you needing to describe the condition in your own words.

Health information about an identifiable person is special category data under UK GDPR. Because cases are designed to be anonymous, we do not intend to collect it. If identifying patient details are submitted by mistake, we treat them as special category data, restrict access to them, and delete them as soon as we become aware of them. Tell us straight away at hello@consultreview.co.uk if you think a case contains them.

What we collect

If you create an account

• Your name and email address.
• Your professional registration body and registration number, and a record of when and how we checked them against the public register.
• The clinical areas you tell us you are competent to review.
• A securely hashed version of your password. We never store or see your password itself.
• Sign-in security details: when you last signed in, failed sign-in attempts, and the browser type and IP address of each signed-in session.

When you use ConsultReview

• The cases you submit: the summary you write, the SNOMED CT term you choose and any redacted PDF.
• The reviews and messages you write, and who can see your cases.
• Share links you create, and when they expire.
• Server logs: the IP address, browser type and page or request for each visit, which our servers record automatically.

If you review a case through a share link without an account

• The name, email address and professional registration details you give us, and your review.

If you subscribe

• Your subscription status, plan and billing dates. Card details are entered on Stripe's checkout page and go directly to Stripe. We never see or store your card number.

Who can see your details

ConsultReview is a professional network, so other prescribers see who they are working with:

• Your name is shown alongside the cases you submit, the reviews you write and the messages you send, to the people who can see them.
• Who can see a case depends on the visibility you choose and the share links you create.
• If you review a case through a share link without an account, your name and registration details are shown to the prescriber who shared it. Your email address is not.
• Your email address, password and sign-in details are never shown to other users.

Why we use it, and our legal basis

If identifying patient information is ever submitted despite the safeguards above, we rely on the condition for health or social care purposes (UK GDPR Article 9(2)(h) and the Data Protection Act 2018, Schedule 1, paragraph 2). This information is handled under the responsibility of a registered health professional, and only for as long as it takes to remove it.

How long we keep it

We keep your data for as long as your account is open. You can ask us to delete it at any time by emailing hello@consultreview.co.uk, and we will delete your account and the cases, reviews and messages attached to it.

Some things are kept for different lengths of time:

• Billing records are kept for six years, as UK tax law requires, even after an account is deleted. Stripe keeps its own payment records under its own privacy policy.
• Sign-in sessions end after 45 minutes without use, and never last more than 12 hours.
• Email verification and password reset links expire after 24 hours and 1 hour respectively.
• Identifying patient details submitted by mistake are deleted as soon as we become aware of them.
• Server logs are kept for a short time for security and troubleshooting, and not used for anything else.
• Backups. Our database provider keeps backups so data can be recovered after a failure. When we delete your data, it remains in those backups until they are replaced in the normal cycle, and is not restored or used in the meantime.

Who processes it for us

We use a small number of trusted providers to run ConsultReview. Each processes personal data only on our instructions, under a contract that requires them to keep it secure.

Some of these providers process data outside the UK, and we may use providers in the United States where we need to. Whenever personal data leaves the UK, we make sure it stays protected by one of the safeguards UK law recognises:

• UK adequacy regulations, which cover countries the UK has judged to protect data properly, including the European Union.
• The UK–US data bridge, for US companies certified under it.
• The UK International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses, for anyone else.

Redacted case PDFs and our application servers stay in the UK. You can ask us for details of the safeguard used for any provider.

We do not sell your data, and we do not share it with advertisers.

Cookies

We only use what is strictly necessary to keep you signed in and remember your settings. There are no analytics, advertising or tracking cookies. Our cookie policy lists each one.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you
• ask us to correct data that is wrong or incomplete
• ask us to delete your data
• ask us to restrict how we use your data, or object to our using it
• ask for the data you gave us in a format you can take elsewhere

To use any of these rights, email hello@consultreview.co.uk. We will reply within one month.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint.

Changes to this notice

If we change how we use your data, we will update this page and the date at the top.