This policy explains the information GP Trusted Tools expects to collect when review submission opens and the privacy principles that apply. Cambridge Medical Partners operates GP Trusted Tools and is the data controller.
Information associated with a review
A submission may include a private email address, a chosen public display name, rating, review text, role, practice-size band, setting, clinical system, UK nation and length of use. Limited technical information may be processed where necessary to prevent spam and abuse.
How information is used
Private contact information will be used to validate reviews and contact a reviewer about their submission where necessary. It will not be published. Only approved review content and deliberately selected, privacy-reduced context will be made public.
Practice and identity privacy
Combinations of contextual details may identify someone even without their name. Public information is therefore minimised and banded, and exact reviewer-practice relationships are treated as potentially identifying personal information.
Retention
Review information is retained indefinitely so that published experiences and their practice context remain useful over time, unless the reviewer requests deletion or retention is no longer necessary or lawful. Requests will be assessed against applicable data-protection obligations.
GP Trusted Tools may introduce a defined period after which direct identifiers are separated from older reviews. Where the link can still be restored, this is pseudonymisation and the information remains personal data. Where the identifying link is irreversibly removed and re-identification is no longer reasonably possible, the remaining review and appropriately minimised practice demographics may be retained as anonymised information.
Lawful basis, storage and service providers
The final policy will identify the applicable lawful basis for each use and the service providers that process information on the platform’s behalf. Personal information will not be sold.
Your rights
To ask about access, correction or deletion of personal information, contact Cambridge Medical Partners at gptools@cambridgemedicalpartners.com. The final production policy will document the full request procedure.
Cookies and analytics
The site aims to keep cookies to a minimum and use privacy-friendly analytics. The production policy will describe any analytics service in use before launch.