Privacy Policy
[VERIFY] — legal review required. This draft describes intended practice. Counsel must confirm it against how the site and your systems actually operate, and against state privacy law where you do business.
Last updated: 27 August 2026
This policy covers information collected through this website. It does not cover protected health information (PHI) that Medway processes on behalf of a client practice — that is governed by the Business Associate Agreement between Medway and that practice.
What we collect
Information you submit through a form on this site: your name, role, practice or organisation name, work email, phone number, specialty, provider count, current EMR/PMS, and anything you write in a message field.
Standard technical information your browser sends: IP address, browser type, pages visited and referring page. This site does not currently run third-party advertising or tracking analytics; if that changes, this policy is updated before the change goes live.
What we do not want
Please do not submit patient health information through any form on this site. An AR aging report contains claim-level financial data, which is what an audit needs — it does not require PHI. If a request needs PHI, we will set up a secure channel first.
If PHI is submitted to us in error, tell us and we will delete it.
How we use it
To respond to your enquiry, to run a requested audit, and to contact you about the service you asked about.
We do not add enquiries to a marketing list. If you contact us, we reply about that enquiry. If we ever introduce a newsletter or marketing email, it will be opt-in, and every message will carry a one-click unsubscribe.
Who we share it with
Service providers who help us operate — hosting, email delivery and, where you use the voice assistant, our conversational AI provider. Each is bound by contract to handle the data only as instructed.
We do not sell your information.
The voice assistant
The voice support assistant on this site processes your speech through a third-party conversational AI provider in order to answer you. Do not share patient information with it. [VERIFY] Name the provider and confirm the data retention terms of your account.
Retention
Enquiry data is kept only as long as it is useful for the conversation it belongs to, and no longer than 24 months from last contact. Ask us to delete it sooner and we will.
Your choices
You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Email the address below and we will respond within 30 days.
Contact
Privacy requests go to the contact address published on our Contact page. Put “Privacy request” in the subject line so it is routed correctly.