Draft – to be reviewed by a solicitor
Privacy notice
Who we are
Notie is run by Laura Bowden, trading as Notie. Contact: hello@hellonotie.com.
Our role
For your clients' information, your clinic is the controller and Notie is the processor: we only handle it to provide the service, on your instructions, under UK GDPR. For your own account details (name, email), we are the controller.
What we keep, and for how long
- Audio recordings are never stored. They are sent for transcription and then discarded.
- Transcripts and notes delete automatically 30 days after they are marked as pasted (or 30 days after creation if never sent). Nothing waiting to be pasted is deleted.
- Office inbox emails delete automatically after 90 days. Finished jobs delete 30 days after completion.
- An audit trail of actions (who, what, when – no clinical content) is kept for accountability.
Sub-processors
- Deepgram – speech-to-text, EU region.
- Anthropic – AI that writes notes and sorts email.
- Lovable Cloud – hosting, database and sign-in.
Security
Each clinic's data is kept separate, staff only see what their role allows, two-step sign-in is required for key roles, and sessions sign out after 30 minutes idle.
Your rights
Under UK GDPR you can ask to access, correct or delete data. Clients should contact their clinic first. Clinic owners can download or delete all clinic data from Settings. You can also complain to the ICO (ico.org.uk).