Trust Centre: Privacy

Overview

ANCHOR is metadata-only by default. This page summarises its privacy posture for procurement review and points to the controlling documents.

Metadata can still be personal data

Metadata-only does not mean no personal data is involved. Some governance metadata may still relate to identifiable individuals.

Personal data that may be processed

Depending on context, personal data may include:

• account data
• staff identifiers
• reviewer attribution
• learning records
• audit events
• public intake submissions
• governance metadata
• support communications

Raw clinical content

Raw clinical, client, or patient content is not expected by default and should not be submitted unless an authorised product flow and a corresponding agreement permit it.

Clinic responsibilities

Clinics remain responsible for their lawful basis for processing, for providing a privacy notice to data subjects, and for managing staff access.

Controlling documents

A data processing agreement, the public Privacy Notice, and the legal pages may control. Final controller and processor positions are subject to the agreement and to solicitor review. International-transfer and hosting-region positions are not asserted here and are addressed in the data-processing and subprocessor documentation.