Privacy notice
Last updated 7 November 2026
EPRindex is published by Acuity Stream Limited (registered in England and Wales, company number 11218747). This notice explains what personal information we hold, why, and what you can do about it. If anything here is unclear, email hello@eprindex.co.uk.
The short version
- We set no cookies of our own, run no analytics and have no accounts, logins or forms. The site loads nothing from anyone else’s servers, including fonts. Our host sets only the security cookies needed to protect the site from attack; those are exempt from the consent rules, which is why you see no cookie banner here.
- We hold personal information only when you send it to us: an email, a correction, or a newsletter sign-up.
- We never sell or rent your details, and we do not use them to profile you.
Who is responsible
Acuity Stream Limited is the data controller for the personal information described here. Postal address: Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton BL6 6HG, United Kingdom. Contact: hello@eprindex.co.uk.
What we hold, and why
- Emails you send us
- Your email address, any name you give, and what you write. We use it to reply, to check a correction against the public record, and to keep a record of what was changed and why. Our basis is our legitimate interest in answering correspondence and keeping the site accurate.
- Newsletter sign-ups
- Your email address and the date you asked to join. We use it only to send the newsletter you asked for. Our basis is your consent, and you can withdraw it at any time using the unsubscribe link in any issue or by emailing us.
- Server logs
- Our host, Cloudflare, records technical information about requests to the site, including IP addresses, to keep the service available and to stop abuse. Our basis is our legitimate interest in the security and availability of the site. We do not use these logs to identify readers.
Who else sees it
Cloudflare hosts the site and routes email for our domain. Our email provider stores the messages you send us. When the newsletter launches we will name the provider that sends it here before the first issue. These suppliers act on our instructions. Some may process data outside the UK, under the safeguards their contracts require.
How long we keep it
Correspondence is kept while the matter is live and for up to 12 months afterwards, so we can explain a change if someone asks. Corrections themselves become part of the site’s record, without your details. Newsletter details are kept until you unsubscribe. Server logs follow Cloudflare’s own retention periods, which are short.
Your rights
You can ask us for a copy of the personal information we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Email hello@eprindex.co.uk and we will acknowledge within 5 working days.
If you are unhappy with our response you can raise with the Information Commissioner’s Office at ico.org.uk.
About the information the site publishes
EPRindex publishes facts about organisations — which patient record system an NHS body runs, what it has signed, when a contract ends — taken from published procurement notices, board papers, trust websites and the trade press. Each claim links to its source. It is not a record about individuals, and we do not set out to publish anyone’s personal information. If you believe personal information about you appears on the site, tell us and we will look at it promptly: see our corrections page.
Changes
If this notice changes we will update the date at the top of this page.