Privacy at a clinic's standard
Heshacare handles some of the most sensitive information there is - what happens between a doctor and a patient. This policy explains what we collect, why, and the care we take with it.
Consent comes first
Consultation audio is captured only after the patient consents in the room. That consent is recorded with the visit, so there is always a clear record of when capture was permitted. A patient may decline, and the clinic can continue to use Heshacare without recording that visit.
What we handle
To draft visit notes and run the surrounding clinic workflow, Heshacare processes the following categories of information:
- Consultation audio captured with consent, used to draft the visit note
- Structured visit notes as reviewed and approved by the doctor
- Patient details needed to maintain records, appointments and bills
- Clinic and staff account information used to provide access by role
How information is used
Information is used to draft notes for the doctor's review, to maintain patient records, to run appointments and reminders, and to produce itemised bills from approved visits. It is used to operate the clinic's own workflow - not for unrelated purposes.
Heshacare drafts and organises. It does not diagnose, prescribe or decide treatment, and no note is filed until the doctor approves it.
Storage, encryption and retention
Records and consultation audio are encrypted in transit and at rest. Retention periods for audio and records are agreed with each clinic, and we are explicit about what is kept and for how long. When a retention period ends, information is removed in line with that agreement.
Access by role
Access is scoped to the role a person holds in the clinic. A receptionist, a doctor and an administrator do not see the same things. Access is limited to the clinic's own team and to what is needed to operate the service.
Rules that apply to your clinic
Before a clinic goes live, applicable health-data and data-protection requirements are confirmed together, so the setup fits the rules that apply to that practice. If those requirements change, the setup is reviewed with the clinic.
Questions about your data
If a clinic or a patient has a question about how information is handled, it can be raised through the clinic, and we will work with the clinic to address it.