Privacy Policy

1. Information Collection

PriorValue collects information necessary to operate the clinical intelligence platform. This includes account and authentication data, clinical observations entered or imported by authorised users, laboratory results, patient demographics as provided by the treating practice, and usage metadata required for platform operation and audit logging. We do not collect information beyond what is needed to deliver the service.

2. Use of Information

Collected information is used exclusively to operate and improve the PriorValue platform. Clinical data is processed to support clinician review, generate longitudinal observations, and produce clinical reports. Usage metadata supports platform security, performance monitoring, and audit trail integrity. PriorValue does not sell personal or clinical data to third parties.

3. Data Security

PriorValue implements technical and organisational measures designed to protect clinical and personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, and regular security assessments. No system is completely secure, and we cannot guarantee absolute security.

4. Practice Isolation

PriorValue enforces strict practice-level data isolation. Clinical data entered under one practice is not accessible to any other practice. This multi-tenant isolation is a foundational architectural principle of the platform and is enforced at the application and data layers.

5. Audit Logging

The platform maintains comprehensive audit logs of clinical data access and modifications. These logs support accountability, traceability, and regulatory review. Audit records are retained in accordance with applicable requirements and are designed to be tamper-evident.

6. Data Retention

Clinical data is retained for as long as necessary to support longitudinal observation and clinical reporting within the platform. Retention periods are determined by clinical relevance and applicable legal requirements. When data is no longer required, it is securely deleted or anonymised in accordance with platform data management policies.

7. Changes to Policy

PriorValue may update this Privacy Policy from time to time. Material changes will be communicated through the platform or by other reasonable means. Continued use of the platform following the posting of changes constitutes acceptance of the updated policy. Users are encouraged to review this policy periodically.