Legal & compliance

The agreements and policies behind the portal

Every formal document that sits under The Practitioner Portal is listed here, in the open. We're finalising them with legal counsel as we open the beta, so some are marked in preparation — we'd rather show you exactly what's coming than publish something before it's been checked properly. How your clients' data is actually handled today is explained in plain language on the Security & GDPR page.

Reviewed 12 July 2026

How your data is handled today

While the formal wording is finalised, the product already behaves the way these documents will describe. Clinical notes are encrypted and every access is logged; staff see only what their role allows; GDPR subject-access export and erasure run as built-in workflows; no generative AI reads your notes inside the platform; and any optional external service receives only de-identified data, opt-in per practice. The Security & GDPR page walks through all of this in plain language.

Core agreements

Terms of Service

The agreement between you and The Practitioner Portal when you use the software.

In preparation

Privacy Policy

How we collect, use and protect your data and your clients' data, under UK GDPR.

In preparation

Cookie Policy

The few cookies we use, why we use them, and how to manage your preferences.

In preparation

Policies & compliance

Data Processing Agreement

Our obligations when we process client data on your behalf, under UK GDPR Article 28.

In preparation

Sub-processor list

The third-party services that help us run the portal, and what each one handles.

In preparation

Acceptable Use Policy

What the portal may and may not be used for, kept short and sensible.

In preparation

AI & external services

How optional services like TheraScript work — opt-in, and only ever de-identified data.

In preparation

Refund & Cancellation Policy

Billing, cancellations, your cooling-off period and how refunds work.

In preparation

Want the detail before the paperwork lands?

The Security & GDPR page explains how your data is protected today.