This Privacy Policy explains how GP Ratings collects, uses, and protects personal information when you use our website and services. GP Ratings is committed to protecting your privacy and handling your personal data in accordance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using GP Ratings, you agree to the collection and use of information in accordance with this policy.

1. Who We Are

GP Ratings operates a platform that allows patients to share feedback about GP practices and enables practices to review patient experience insights.

For the purposes of data protection law, GP Ratings acts as the data controller for personal data collected through the platform.

2. Information We Collect

We may collect and process the following types of information:

• Contact information such as name, email address, or account details when users register.
• Practice account information when GP practices create a dashboard account.
• Patient feedback and review submissions.
• Technical information including IP address, browser type, device information, and website usage data.
• Communication records when users contact our support team.

We do not request or require users to submit sensitive clinical or medical information.

3. How We Use Your Information

GP Ratings uses personal information for the following purposes:

• To operate and maintain the GP Ratings platform.
• To allow patients to submit feedback about GP practices.
• To provide analytics and insights to GP practices through the dashboard.
• To improve our services and platform functionality.
• To communicate with users about their accounts or service updates.
• To ensure platform security and prevent misuse.

4. Legal Basis for Processing

Under UK GDPR, we process personal data based on the following legal grounds:

• Consent when users voluntarily submit reviews or feedback.
• Legitimate interests in operating and improving the GP Ratings platform.
• Contractual necessity when GP practices subscribe to platform services.
• Legal obligations where we are required to comply with applicable laws.

5. Patient Reviews and Feedback

Patient feedback submitted through GP Ratings may be displayed publicly in order to provide transparency and insights into patient experience.

Users should avoid including personal health information, confidential details, or identifying information in feedback submissions.

GP Ratings may moderate or remove content that violates platform policies.

6. Data Sharing

GP Ratings does not sell personal data.

We may share limited information with:

• GP practices for the purpose of providing feedback insights.
• Service providers who assist with hosting, analytics, or platform operations.
• Legal authorities where required by law.

All third-party service providers are required to process data in accordance with applicable data protection laws.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including maintaining platform functionality and complying with legal obligations.

When data is no longer required, it will be securely deleted or anonymised.

8. Data Security

GP Ratings implements appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction.

While we strive to protect user data, no online service can guarantee absolute security.

9. Your Data Protection Rights

Under UK GDPR, individuals have the following rights:

• The right to access personal data we hold about you.
• The right to request correction of inaccurate information.
• The right to request deletion of personal data.
• The right to restrict or object to data processing.
• The right to data portability where applicable.

Requests relating to these rights can be submitted through our contact channels.

10. Cookies and Website Analytics

GP Ratings may use cookies and analytics tools to understand how users interact with the platform and to improve website functionality.

Users can manage cookie preferences through their browser settings.

11. Third-Party Links

The GP Ratings platform may contain links to third-party websites. We are not responsible for the privacy practices or content of external websites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or platform functionality. Updated versions will be published on this page.

13. Contact

If you have questions about this Privacy Policy or how your personal data is handled, please contact GP Ratings support.