UK GDPR Articles 13 & 14
Privacy Notice
How Curatio Ltd processes onboarding, signatory, and operational metadata for subscribing private clinics.
1. Onboarding & Account Data
When you submit a clinic onboarding request, we collect your clinic's legal name, ICO registration number, optional CQC provider ID, primary contact details, DPO / Caldicott Guardian contact details, and authorised signatory records to perform pre-contractual verification and execute the Article 28 DPA (UK GDPR Art. 6(1)(b) and Art. 6(1)(c)).
2. Retention & Residency
All onboarding and tenant records are stored in the United Kingdom. Declined onboarding requests are purged after 90 days. Active tenant DPA and signatory records are retained for the life of the agreement plus 6 years for statutory limitation compliance.
3. Your Rights
Data subjects may request access, rectification, or erasure by contacting your clinic's Data Protection Officer or emailing onboarding@curatio.clinic. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).