Privacy Notice
1. Who we are
Arjus is a GP-developed NHS primary care analytics platform operated by Arjus Ltd.
Contact: admin@arjus.co.uk
2. What data we process
| Data type | What it contains | Source | Legal basis |
|---|---|---|---|
| User accounts | Name, NHS email address, default practice, role. No patient data. | User registration | Legitimate interests |
| GPAD appointment data | Aggregated appointment counts by appointment type, mode, and outcome. No patient identifiers. NHS Digital GPAD export format. | Practice upload | Legitimate interests (QI) |
| CBT telephony data | Monthly call volume, answer and abandonment rates by GP practice. Open NHS Digital dataset. | NHS Digital regional export | Open data |
| QOF / CVD / prevalence data | Practice-level QOF achievement and disease prevalence. Publicly available NHS Digital data. | NHS Digital open data | Open data |
| AI query logs | Anonymised query text and response metadata for platform improvement. No patient or appointment details. | Platform usage | Legitimate interests |
3. How we use your data
- GPAD data is stored to enable trend analysis, benchmarking, and forward planning within your dashboard. It is not used for any purpose outside the platform.
- AI interpretation sends only summary statistics (totals, percentages, aggregate counts) to the OpenAI API. Individual appointment records are never transmitted externally.
- User accounts are used for authentication and to restrict access to practice-specific data.
- Data is never sold, shared with third parties, or used to train AI models.
4. Where data is stored
All practice data is stored on a dedicated server hosted in the United Kingdom by Fasthosts Internet Ltd (a UK company). Data does not leave the UK except where AI interpretation is used (OpenAI API, servers in the US). Only aggregated statistical summaries are transmitted for AI interpretation — never raw appointment records.
5. How long we keep data
| Data type | Retention period |
|---|---|
| GPAD appointment data | Retained while your account is active. Deleted on account closure or upon request. |
| User account data | Retained while the account is active. Deleted on request. |
| AI query logs | 90 days, then automatically deleted. |
| Open NHS Digital data (CBT, QOF etc) | Retained indefinitely as it is publicly available data. |
6. Your rights under UK GDPR
You have the right to:
- Access the data held about you or your practice
- Rectification of inaccurate data
- Erasure (“right to be forgotten”) of your account and uploaded data
- Restriction of processing
- Object to processing based on legitimate interests
- Data portability — export of your uploaded GPAD data
To exercise any of these rights, contact admin@arjus.co.uk. Requests will be responded to within 30 days.
7. Security
- Access to the platform requires authenticated login with NHS email verification
- Practice data is access-controlled — users can only view data for practices associated with their account
- The platform is served over HTTPS with TLS encryption in transit
- Database access is restricted to the server and not exposed publicly
This platform has not undergone formal NHS Digital Security Assessment (DSPT). It is intended for quality improvement purposes by clinical staff and should not be used to make individual patient care decisions.
8. Note on GPAD data sensitivity
GPAD (General Practice Appointment Data) is aggregated appointment activity data. It contains no patient-identifiable information — it is a count of appointments by type, mode, and outcome, not a record of individual consultations.
However, some practices may consider their appointment volume and configuration to be commercially sensitive operational data. Practices uploading GPAD data do so voluntarily and retain the right to request deletion at any time.
If your practice or PCN requires a formal Data Processing Agreement (DPA) before uploading data, please contact us at the address above.
9. Complaints
If you have concerns about how your data is handled, please contact admin@arjus.co.uk in the first instance.