Privacy

What you send us

If you use the form on /contact

Your name, your email, what you want the reply to cover, and which of a demo, a dry run or a written answer you asked for. Practice name and stage are optional. No phone number. One hidden field is a spam trap: anything that fills it in is discarded rather than stored.

One thing more, and it is the only thing here you did not type. If you reached the form by pressing a button on this site, we keep which button, as one of seven fixed labels such as pricing-hero. It tells us which page earns a conversation, which is the only thing we would otherwise have to add an analytics script to learn. It is not a URL, not an advertising identifier, and not connected to anything else about you. Arrive any other way and there is nothing to keep.

What we use it for

Replying to you, and arranging what you asked for. We do not add you to a marketing list.

Not the place for patient records

To send us real practice data, ask first and we will arrange somewhere better for it. If it arrives here anyway, we delete it, tell you, and offer that route.

Who else sees it

We never sell it or share it for advertising. It reaches only the providers that host our systems, keep our backups and deliver our email, and only so they can do that.

How long we keep it

Twelve months, then a scheduled job deletes it rather than somebody remembering to. Become a customer and we keep your contact details while the account is open, then only as long as billing, the agreement and the law require. What you typed in the message box goes at twelve months either way. Deleted data leaves live systems at once, and encrypted backups expire within thirty days.

Stopping abuse

Several submissions in quick succession from one place are refused, so the form cannot flood a mailbox. Counting them holds your network address for one minute, then drops it. It is never stored with your enquiry.

What this server logs

No request log: access logging is switched off, so nothing records which addresses asked for which pages. That is a setting, not a promise. A separate operational log records things like the server starting or an error, and an error line can carry the address that caused it. It keeps the last 30 MB and drops the rest, so no number of days would be honest.