Chronix Scribe privacy.
Ambient clinical note drafting for clinicians (built, not yet launched). For clinical notes, Chronix Health Group Ltd is a processor acting on the clinician's instructions — the clinician or their practice is the controller. For accounts and billing, Chronix is the controller.
Clinical notes and transcription
Our role: processor. Chronix Health Group Ltd is a PROCESSOR for consultation transcripts and draft notes — the controller is THE CLINICIAN or their practice, whose own lawful condition for health data applies.
Why: Drafting clinical notes from consultations on the clinician's instruction. Audio is never stored — transcribed in memory and discarded. The clinician reviews, edits and signs everything; no diagnosis, no prescribing, no autonomous clinical decision.
Lawful basis: Processed on the clinician's documented instructions.
Special-category data: Health data — processed on the controller clinician's instruction under their own condition.
Who receives it: Speechmatics (speech recognition), Supabase, Vercel.
How long we keep it: As instructed by the controller clinician; audio is never retained.
Accounts and billing
Our role: controller. Chronix Health Group Ltd is the controller for account and billing data.
Why: Operating clinician accounts and taking payment.
Lawful basis: Contract; legal obligation (tax records).
Who receives it: Stripe (payments), Supabase, Vercel.
How long we keep it: Account life plus 30 days; billing and tax records 6 years.
International transfers
Article 28 contracts and a transfer assessment for the speech-recognition provider are prerequisites for launch.
Your rights
You can ask for access to your data, correction, deletion, restriction, and a portable copy, and you can object to processing based on legitimate interests. Where we act as a processor, we pass your request to the controller (the organisation or clinician) without delay.
Complaints
Tell us first if you can — use the data complaints form (no account needed). We acknowledge every complaint when it is made and respond within a month. You can also complain to the Information Commissioner's Office (ICO), the UK regulator, at any time, and you have the right to an effective judicial remedy.