For health tech companies

Privacy Notice

Last updated: 29 September 2026

This page sets out what personal information the Primary Care Innovation Clinic handles when you visit our website, apply for a clinic session, attend one, or ask to hear from us, and what choices you have about it.

1. Who is responsible for your information

The clinic is run by Dr Ian Morrant, trading as The Primary Care Innovation Clinic. As the data controller, Dr Morrant decides how your information is used and is accountable for looking after it.

ICO registration number: ZC014589
Contact: info@thepcic.com

2. What we collect

Our application form asks for:

your name, role, work email address, company name and company website
details of what you are building for primary care and the decision you want help with
whether you would like occasional updates from the clinic

If you go on to book a session, we will also have your booking details and payment records, any notes made during the session and, if the session is recorded, the recording.

When you visit our website, Cloudflare Web Analytics counts the visit and records general, non-identifying information such as the page viewed, the website that referred you, your type of device and browser, and your approximate country. It does not use cookies, and we do not use it to identify you.

Please leave out any patient information or anyone’s health details. We have no need for it and would rather not receive it.

3. Why we use it, and the legal grounds

To assess your application. We rely on steps you have asked us to take before any agreement, and on our legitimate interest in checking the clinic is right for you.
To run your session. We rely on the agreement between us.
To record sessions, so that there is a reliable account of the discussion. We will let you know before we press record, and if you say no, the session goes ahead unrecorded. We rely on our legitimate interests.
To contact you about further advice connected to your application or session. We rely on our legitimate interests, and you can tell us to stop whenever you like.
To keep business and tax records. The law requires us to.
To send clinic news and insights, only if you ticked the box asking for them. We rely on your consent, which you can take back at any time by replying to an update or emailing us.
To understand how our website is used. We rely on our legitimate interest in knowing how many people visit and how well the site performs.

Your information is never sold or passed to other organisations for their marketing. Every application is read and decided on by a person, not by software.

4. Who can see it

Only the two clinic advisers read submissions: Dr Ian Morrant and Dr Sarah Bruen, who advises for the clinic under a consultancy agreement. Both keep what you tell us confidential.

5. Tools we use

A few outside services help us run the clinic, and each handles your information only as far as it needs to:

Google (Forms, Workspace and email): receiving and storing applications
Calendly: booking sessions
Stripe: taking card payments. Your card details go straight to Stripe and are not shared with us. Stripe looks after that information under its own privacy notice.
Zoom: holding and, where agreed, recording sessions
Cloudflare: counting website visits (Cloudflare Web Analytics)
our bank and any accounting or invoicing software, if we invoice you directly

Our accountants may see financial records. We will only pass information to HM Revenue & Customs or other authorities if the law obliges us to.

6. Where it is stored

Google, Calendly, Stripe, Zoom and Cloudflare are international companies, so your information may be held on their systems outside the UK, including in the United States. We choose providers whose terms include the protections UK data protection law expects when information is sent abroad.

7. How long we keep it

Applications we don’t take forward: deleted 12 months after you submit them.
Session recordings: deleted 12 months after the session.
Client information: kept while we work together and then for up to 6 years for tax and accounting reasons, after which it is deleted.
Updates list: kept until you unsubscribe.

8. Keeping it secure

Your information sits in password-protected accounts that only the clinic advisers can get into.

9. Your choices and rights

UK data protection law lets you:

see what we hold about you, including any recording you appear in
have anything inaccurate put right
have your information erased
limit what we do with it
say no to uses based on our legitimate interests, such as follow-up contact or recording
stop receiving updates
have your information handed to another organisation, where that right applies

Email info@thepcic.com to make any of these requests. You will hear back within one month.

10. Concerns and complaints

If something has gone wrong with how we have handled your information, we would like the chance to fix it, so please email us. You can also raise it with the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

11. Updates to this notice

This notice will be revised, with a new date at the top, whenever our handling of your information changes. You will always find the current version on this page.