Privacy policy

Who we are

PracticA is run by Vinit Khurana, trading as PracticA. Contact: support@practica.org.uk. This policy covers this website and the PracticA app.

This website

This website uses no cookies, no analytics and no tracking. Our hosting provider (Cloudflare) handles the technical details of each visit, such as your IP address, to deliver the pages and protect them from attack.

The PracticA app

Experts' accounts

For each expert and their staff we keep account details (name, email address, role), practice details (practice name, address, the bank details printed on their invoices), settings, and a record of important actions for security. We use this to provide the service the expert has signed up for (our contract with them) and to keep it secure (our legitimate interests).

Case information

Experts use PracticA to manage their medicolegal work. The information they enter about their cases, such as claimants' names and contact details, solicitors' details, appointments, medical information, reports and invoices, belongs to the expert. The expert is the data controller for it; PracticA handles it only on the expert's instructions, to provide the service. If your details are in an expert's case, please contact that expert about them.

Because case information can include health details, access is limited to the expert's own workspace and the people they allow, names can be hidden on screen, and viewing hidden names is recorded.

Emails

Emails to solicitors and claimants are sent from the expert's own email account (Microsoft or Google), only when the expert or their staff press Send or have switched on an automatic reminder. PracticA keeps a copy of exactly what was sent.

Google Calendar data

Connecting a Google calendar is optional. If an expert connects one, PracticA uses Google's permissions only for these purposes:

• Your list of calendars (calendar.calendarlist.readonly): to show you which of your calendars you can tick as "counts as busy".
• Busy times (calendar.freebusy): PracticA reads only the start and end of busy periods in the calendars you tick, never their titles, descriptions or guests, so it doesn't offer appointment times when you are busy. Busy times are read when needed and are not stored.
• The PracticA calendar (calendar.app.created): PracticA creates one separate calendar called "PracticA" in your Google account and adds your PracticA appointments and away days to it. Appointments show only the appointment type, the case's code (never a name) and the venue, "Video" or "See PracticA". PracticA also reads the times of entries you add to that calendar, so they block those times. It can only see and change calendars it created.

What PracticA stores: the sign-in tokens Google issues (encrypted), the IDs of the events PracticA created, and their times. It does not store the titles or details of your own calendar entries.

Sharing: PracticA does not sell Google user data, does not share it with anyone, and does not use it for advertising or to train artificial-intelligence models. No person at PracticA reads it unless you ask for help with a problem, or the law requires it.

Turning it off: you can disconnect Google in PracticA's Calendar & availability settings at any time; PracticA then asks Google to withdraw its access. You can also remove PracticA at myaccount.google.com/permissions.

PracticA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Microsoft Outlook data

Connecting Outlook is optional. If an expert connects it, PracticA reads busy times in the calendars they choose so it doesn't offer times when they are busy, shows their own Outlook entries in PracticA's Diary to them alone (read when needed, never stored), adds their PracticA appointments to their calendar (type and case code only, never a name), and sends emails from their mailbox when they press Send. It does not read their emails. The same sharing rules apply as for Google: no selling, no sharing, no advertising, no AI training. Disconnecting in PracticA, or removing PracticA from their Microsoft account's app permissions, stops it.

Where data is kept and for how long

PracticA's data is kept in the United Kingdom. Account and case information is kept while the expert's account is open, and deleted within 90 days after it closes, except where the law requires longer (for example, invoices kept for tax purposes).

Your rights

You can ask to see, correct or delete the personal data we hold about you, ask us to limit or stop using it, or ask for a copy to take elsewhere. Email support@practica.org.uk. For information inside an expert's case, contact the expert, who decides about it. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes, we will update the date at the top and tell experts using PracticA about anything important.