Privacy notice

Who is responsible

Clerked and Tuohy are built and run by Ankit Kedia, a practising anaesthetist, acting personally. This is not a project of any NHS Trust, and no Trust is responsible for it. For anything on these websites, the data controller is that individual rather than an organisation.

To ask anything about this notice, or to exercise any of the rights below, email via the enquiry form.

The Clerked logbook

The logbook at app.clerked.uk collects nothing. There is no account, no sign-in and no server to send anything to. Your cases are stored by your own browser, on your own device, and they stay there until you delete them or clear the browser's data.

There is also no field in the logbook in which a patient could be identified: no name, no hospital number, no date of birth. That is a deliberate design constraint, not a setting.

Because nothing is transmitted, there is nothing here to request, to correct or to have erased. Backing up and exporting are entirely in your hands.

The Tuohy sandbox

What is collected when you sign up

Your name

As you type it. Used to address you and to know who is trying Tuohy.

Your email address

To send your sandbox link, and to follow up on feedback.

Where you work

Optional. Used to understand which departments are interested.

A one-way hash of your IP address

Not the address itself. It is combined with a secret and hashed, so the original cannot be recovered from the database. Used only to stop one source creating unlimited sandboxes.

Your browser's user-agent string

To know whether people are trying it on a phone or at a desk.

Why, and on what basis

The lawful basis is consent, given by ticking the box on the sign-up form. The purpose is narrow: knowing who is trialling Tuohy during its departmental review, and being able to follow up on what they found.

Consent is recorded against the version of this notice you were shown, so that a change to this text is never read as agreement to something you did not see. You can withdraw it at any time, and withdrawing it does not affect anything done before you did.

How long it is kept

Registration details are kept for twelve months after your trial ends, then deleted. The sandbox itself, and everything you type into it, is deleted one day after it is created.

Who else sees it

Nobody. It is not sold, shared, or passed to any Trust, employer, college or third party. The only others involved are the technical suppliers that make the site work — the hosting provider, and the email provider that delivers your sandbox link — who process it on instruction and for nothing else.

What is in the sandbox itself

Each sandbox is a private, throwaway copy of the Tuohy application. Nobody else can see yours, and it is deleted after a day along with everything in it.

It must never contain real patient data. It is a demonstration running on public infrastructure, it is not a clinical system, and it has been through no Trust's information governance process. The invented women in it exist so that nobody needs to use a real one. If real patient data is entered anyway, it is deleted with the rest of the sandbox after a day — but entering it would be a disclosure that should be reported to the relevant Trust, not something this notice can put right.

The enquiry form

The enquiry form does not send anything to this website. It opens your own email application with a message prepared, which you then send yourself. The message goes to an ordinary personal mailbox. Nothing you type into that form is stored here, and if you never send the message, nothing leaves your device.

These websites

www.clerked.uk and tuohy.clerked.uk use no analytics, no tracking, no advertising and no cookies. The fonts are served from the site itself rather than from Google, so loading a page makes no request to any third party.

The hosting provider keeps ordinary server logs of requests, as every web host does, for security and reliability.

Your rights

Over the registration details described above, you can ask to:

• see what is held about you;
• have it corrected if it is wrong;
• have it deleted;
• withdraw your consent, which also ends your sandbox;
• receive it in a portable form;
• object to it being held, or ask that its use be restricted.

Ask through the enquiry form. Requests are answered within one month.

If you are not satisfied with the response, you can complain to the Information Commissioner's Office at ico.org.uk, which regulates data protection in the UK.

Changes to this notice

This notice is versioned by date. If it changes in a way that affects what you agreed to, consent is asked for again rather than assumed.

Tuohy's clinical information governance work — the DPIA, the DCB0129 and DCB0160 safety case, and the Data Security and Protection Toolkit — is a separate exercise from this notice and applies to a Trust deployment, not to this website. It is summarised on the Tuohy status section.