Your team approves
PCP drafts messages in your clinic’s voice, and a person approves every reply and follow up. Only reminders and confirmations your team has signed off go out on their own.
What PCP reads, and what it never touches
PCP works inside rules your clinic sets. This page explains what it reads, what it never touches and how that is agreed before any work begins.
Get a free auditConnectionsChosen by your clinic
WhatsApp BusinessRead messages · send approved repliesOn
Phone and missed callsRead call logOn
Website formsRead submissionsOn
Email inboxRead enquiries · send approved repliesOn
Practice diaryRead free times · write bookingsOn
Clinical notesTreatment notes and medical historiesNever
Example setup. Each connection is chosen by your clinic.
Only what you connect
PCP reads the channels and diary you choose: WhatsApp, Instagram, phone logs, website forms, email and your practice diary. Each connection lists exactly what it can read and do.
Clinical notes are out of scope
PCP does not need treatment notes, medical histories or clinical records, so it never connects to them. That boundary is written into every agreement.
Clinical notesTreatment notes and medical historiesNever
The same in every clinic setup.
Agreed before we start
How data is accessed, where it is stored, who can see it and when it is deleted are written down with your clinic before the audit reads anything, and reviewed when anything changes.
Stays with your clinic
Patient information is used only to run your clinic’s patient journey. It is never sold or shared with other clinics, and our AI provider may not train its models on it.
You can leave cleanly
If you stop using PCP, connections are removed and your clinic’s data is returned or deleted on the timeline in your agreement.
What PCP can and cannot do
SourceReadAct
WhatsApp BusinessMessages from enquiring patientsSend approved replies
InstagramDirect messages from enquiring patientsSend approved replies
PhoneCall log, missed callsCreate a callback task
Website forms and emailEnquiry submissionsSend approved replies
Practice diaryFree appointment timesHold and write bookings
Clinical recordsNo accessNo access
Questions about a specific setup? Talk to us and we will walk through it with your practice manager.
The legal detail
Who is responsible
Your clinic is the data controller for its patients’ information. PCP is a data processor: we process it only on your clinic’s written instructions, under a data processing agreement signed before the audit reads anything.
Health information
Enquiries can include health details, which are special category data under UK GDPR. PCP uses them only to answer the enquiry and book the appointment.
The providers we use
ProviderWhat it does for PCPWhat it commits to
AnthropicClaudeDrafts replies from your price list, diary and agreed templates.Its commercial terms prohibit it from training its models on the data we send. Inputs and outputs are deleted within 30 days by default, unless flagged for misuse or required by law. SOC 2 Type II, ISO 27001 and ISO 42001.
GoogleWorkspaceHolds PCP’s documents, records and signed agreements.Content is not used for advertising, or to train AI models outside Workspace without permission. ISO 27001, 27017 and 27018, audited under SOC 2.
MetaWhatsApp Business, InstagramCarries messages on your clinic’s own WhatsApp Business and Instagram accounts, which PCP reads and replies through with the access your clinic grants.The accounts stay your clinic’s. Messages are handled under Meta’s business terms for WhatsApp and Instagram.
Where data is processed
Our providers may process data outside the UK. Each transfer is covered by a data processing agreement under UK GDPR with approved transfer safeguards. Website enquiries pass through Netlify and Resend, as our privacy notice explains. The full list of providers for your clinic is in your agreement.
When you leave
Connections are removed and your clinic’s data is returned or deleted on the timeline in your agreement. Your channels, diary and practice system keep working as they did before.