What we store, who can see it, and how it is handled.
Access is scoped by role and assignment. A clinician sees only their own patients; a patient sees only their own record. This is enforced in the database itself, not just in the interface.
Completed or inactive patients can be archived rather than deleted, which keeps the full history (consultations, questions, questionnaires, journey and audit trail) intact and reversible. Permanent deletion is restricted to administrators and is recorded in an audit log.
For access, correction or deletion requests relating to your data, contact support@anestheo.com. Full details of how we process personal data are in the Privacy Policy.
See also Security for the technical safeguards behind these protections.