1. Overview
Practicos is built to keep your clients' data safe and to help you meet your UK GDPR and professional record-keeping obligations. This page summarises the technical and organisational measures we use to protect your practice. For the full detail on how we handle personal data, see our privacy policy.
2. Encryption
- Data is encrypted in transit using TLS.
- Data is encrypted at rest where supported by our infrastructure.
3. Access Control
- Role-based access, so people see only what their role needs.
- Multi-factor authentication is available on every account.
4. Hosting & Infrastructure
Your practice data is stored in our primary database hosted in the United Kingdom (London region), with reputable cloud providers using industry-standard security controls. Some of our service providers operate in the United States under the UK-US Data Bridge and Standard Contractual Clauses (SCCs), with additional safeguards including encryption. The full list is in our privacy policy.
5. Backups
We take regular, encrypted backups with secure storage, so your records are resilient against accidental loss.
6. Data Retention
We keep personal data only as long as necessary — for example, clinical notes are retained in line with professional record-keeping requirements. The full retention schedule is set out in our privacy policy.
7. Sub-processors
We use a small number of carefully chosen service providers (for authentication, payments, database hosting, email and SMS). Each is listed — with what it does, the data it handles and where it operates — in our privacy policy.
8. Your Data, Your Control
- Export your data at any time in CSV and JSON.
- Delete your account and data, subject to legal retention requirements.
You remain the data controller for the client records you enter; Practicos acts as your data processor. See our privacy policy for how this works.
9. Compliance
- Built to support UK GDPR and the Data Protection Act 2018.
- An audit log of activity on your records, supporting your UK GDPR record-keeping.
- Clinical notes are treated as special category (health) data and handled accordingly.
10. Reporting a Concern
If you believe you have found a security issue, or have a question about how we protect your data, please contact us at privacy@practicos.co.uk or through our contact page. We take every report seriously.