ReportRxClinical activity tracking
NHS governance Dashboard Completeness The report
Clinician log in Book a demo
Report Rx Ltd

Privacy policy

How Report Rx Ltd collects and handles personal data — on this website and within the ReportRx platform.

Last updated 13 September 2026

The short version

  • ReportRx does not hold patient-identifiable data. The platform records clinical activity counts and workstream categories only — no names, NHS numbers, dates of birth or clinical notes.
  • Application data is processed in the UK and stored in the EU (Ireland). No data is processed or stored outside the UK or EU.
  • This website uses no cookies and no cross-site tracking.
  • For the organisations we serve, we act as a data processor — you remain the controller of your staff's data.

1. Who we are

Report Rx Ltd ("ReportRx", "we", "us") is a company registered in England and Wales, company number 17359078, with its registered office at Imperial House, 79–81 Hornby Street, Bury, BL9 5BN.

We are the data controller for personal data we collect through this website and in administering our customer relationships. Where we process data on behalf of a customer organisation within the ReportRx platform, we act as a data processor on that organisation's instructions.

For any privacy question, contact hello@reportrx.co.uk.

2. What this notice covers

This notice explains how we handle personal data in two distinct contexts: visitors to this website, and users of the ReportRx application. The two are treated separately below because the data, the purposes and our legal role differ.

3. Website visitors

Analytics

We use Plausible Analytics to understand how this website is used. Plausible is a privacy-focused analytics service that does not use cookies, does not collect or store personal data, and does not track visitors across websites or over time. It records aggregate information such as page views, referring site, approximate country, device type and clicks on outbound links.

No individual visitor is identified and no personal data is collected, so no consent banner is required and there is nothing for you to opt out of. Plausible processes this data within the European Union.

Booking a demo

Our "Book a demo" links take you to Cal.com, a third-party scheduling service. If you book, you provide your name, email address and any details you choose to add. We use that information solely to arrange and conduct the demonstration and to follow up on your enquiry. Cal.com processes this data as our processor under its own privacy terms.

Contacting us

If you email us, we hold your message and contact details for as long as needed to deal with your enquiry and to keep a record of our correspondence.

Legal basis

We rely on our legitimate interests in operating and improving our website, responding to enquiries and marketing our services to organisations. Where we send marketing emails to individuals, we rely on consent or the soft opt-in for existing business contacts, and every message includes an unsubscribe option.

4. Users of the ReportRx application

What the platform holds

ReportRx is a clinical activity tracking and productivity reporting tool. The platform records:

  • Account data — the user's name, work email address, job role and the practice, neighbourhood team, PCN or organisation they belong to.
  • Activity data — counts and categories of clinical activity recorded by a user against a workstream, with the date and the organisational unit it relates to.
  • Technical data — sign-in events, timestamps and audit records necessary to secure the platform and evidence who recorded what.

ReportRx does not hold patient-identifiable information. The platform is not designed to accept, and should not be used to record, patient names, NHS numbers, dates of birth, addresses, clinical notes or any other information that identifies an individual patient. Activity is recorded as counts against categories, not as patient records.

Our role

Where a PCN, practice, neighbourhood team or other organisation uses ReportRx, that organisation is the controller of its staff's personal data and we act as its processor. We process that data only on the organisation's documented instructions, under a written data processing agreement.

Purpose

Data in the platform is used to provide the service to the customer organisation: recording activity, tracking completeness, producing reports, and supporting the customer's own governance and assurance needs. We do not sell customer data, and we do not use it to build profiles of individuals for any purpose of our own.

5. Who we share data with

We use a small number of suppliers to run the service. Each is bound by contract to process data only on our instructions and to appropriate security standards.

SupplierPurposeLocation
SupabaseApplication database and authenticationEuropean Union (Ireland)
VercelApplication hosting and deliveryUnited Kingdom (London)
ResendTransactional email (sign-in, notifications)European Union
Google WorkspaceBusiness email and calendarUnited Kingdom / European Union
Plausible AnalyticsWebsite analytics (no personal data)European Union
Cal.comDemo schedulingEuropean Union

We may also disclose data where we are required to by law, or to establish or defend legal claims. We do not otherwise share personal data with third parties.

6. International transfers

Application data is stored in the European Union (Ireland) and processed by servers in the United Kingdom (London). Ireland benefits from UK adequacy regulations, so no additional transfer safeguards are required. Where any transfer falls outside the UK or an adequate country, we put in place the UK International Data Transfer Addendum or equivalent safeguards.

7. How long we keep data

  • Customer data in the platform — for the duration of the contract. On termination we return or delete the data in line with the customer's instructions and our data processing agreement, and delete our copies within 90 days unless a longer period is agreed or required by law.
  • Enquiries and demo bookings — up to 24 months from our last contact, unless you ask us to delete them sooner.
  • Business records — for the periods required by UK company and tax law.

8. Security

We take appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, role-based access controls so users see only the data relevant to their organisation, multi-factor authentication on administrative accounts, audit logging, and least-privilege access for our own staff. Our security measures are described in more detail on our data protection page.

9. Your rights

Under UK data protection law you have the right to access the personal data we hold about you, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, and to data portability where it applies.

If you are a user of the ReportRx platform, your employer or the organisation that gave you access is the controller of your data — please direct your request to them in the first instance, and we will support them in responding. For data we hold as controller, contact hello@reportrx.co.uk and we will respond within one month.

You also have the right to complain to the Information Commissioner's Office at ico.org.uk. We would ask that you raise the matter with us first so we have the opportunity to put it right.

10. Cookies

This website does not set cookies. We use no advertising, remarketing or cross-site tracking technologies. The ReportRx application uses strictly necessary cookies to keep you signed in; these are essential to the service and cannot be disabled without preventing the application from working.

11. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed. Where changes are significant, we will tell affected customers directly.

12. Contact

Report Rx Ltd
Imperial House
79–81 Hornby Street
Bury
BL9 5BN

hello@reportrx.co.uk

ReportRxClinical activity tracking

Clinical activity tracking and productivity reporting for clinical teams across primary and community care.

Product
The dashboard The report How it works Sign in
Company
Report Rx Ltd Company no. 17359078 Imperial House
79–81 Hornby Street
Bury
BL9 5BN
Contact
hello@reportrx.co.uk Book a demo
© 2026 ReportRx. All rights reserved. Privacy policy · Terms · Data protection · DPA