Provider Privacy Notice

Operator and audience

Cozy Health Limited processes information to operate its provider dashboard. This notice addresses providers and explains patient-data handling within that service. It supplements the consumer Privacy Policy and does not replace your practice’s own patient notice. Contact Team@cozyhealth.org.

Provider and practice information

We process your name, email, practice/professional details, licence and verification information where supplied, timezone, credentials, session information and support communications. Passwords are hashed rather than stored as readable passwords.

Patient workflows

We process patient links and sharing choices, assigned-resource status, provider notes, direct provider messages, authorized assessment results and generated reports. Access is scoped to the active relationship and relevant permissions. Journal-sharing endpoints exclude full journal text, recordings and transcripts.

Access records and purposes

Access records may include actor and resource identifiers, actions, timestamps, request IP and user-agent information. Infrastructure proxies can affect the recorded IP. These records support security, authorization, accountability and investigation; they are not a promise of continuous clinical monitoring.

Recipients and responsibilities

Patient information is made available to authorized linked providers and appropriately authorized operations staff, with vendors processing information needed to run the service. A provider’s own records, exported copies and onward disclosures remain subject to that provider’s obligations.

The production vendor inventory, hosting locations, legal grounds, role allocation and transfer arrangements must be verified before publication. Separate processing agreements are required where applicable; accepting this notice is not a substitute.

Analytics and diagnostics

This launch does not instrument patient-data screens with PostHog. Optional consumer usage analytics does not receive patient content, assessment results, crisis activity or provider messages. Any technical diagnostics must exclude patient content and credentials.

Patient controls and retention

Patients may change optional sharing or revoke a connection. Subsequent access respects the change; already downloaded files cannot be recalled. Reconnection starts with optional categories off. Account deletion and unlinking are different actions.

Provider records, access logs, backups, retained reports and provider-held copies need an approved retention schedule. We do not promise that unlinking or deleting a patient account automatically deletes every copy.

Rights, requests and security

Contact Team@cozyhealth.org for access, correction, deletion or privacy complaints. We verify identity and authority proportionately and coordinate requests involving practice records. Applicable rights and exceptions depend on the role and relevant law. Report suspected misuse promptly and avoid including patient health content in an initial support email.