Healing Process policy suite
Public Website Terms of Use
1. Purpose
To set fair conditions for use of the public Healing Process website and make clear that its content is general product and governance information, not a clinical service or individual medical advice.
2. Scope and status
These terms apply to public pages, downloadable prototype material, source links, help content and general enquiry functions. Separate individual and professional terms apply to authenticated apps and portals.
Core supplier and product policy
3. Policy principles
- The website is not continuously monitored for medical concerns and must not be used to send confidential patient information or request emergency care.
- Health information is general and source-linked. Users should follow their own care plan and professional advice.
- Product illustrations and roadmaps may describe planned or configurable functionality; only signed contracts and released documentation define a live service.
- Nothing in these terms excludes liability that cannot lawfully be excluded or limits rights that law protects.
4. Mandatory requirements
- Users may view and print public material for lawful personal or organisational evaluation but may not misrepresent, resell, remove attribution, scrape excessively, probe security or use content to create misleading clinical material.
- Healing Process names, logos, screenshots, design and original content remain protected. External-source rights remain with their publishers.
- Links are provided for convenience and authority; external content may change and is controlled by the publisher.
- Users must not submit unlawful, abusive, infringing, malicious or confidential material through public functions.
- The operator may protect, suspend or change the website for security, law, accuracy or service reasons and should preserve important notices where practicable.
- Information about regulation, NHS use, pilots or evidence is stated as of its date and must not be quoted as proof of approval beyond the exact wording.
- Governing law and jurisdiction clauses must be completed and legally reviewed for the intended market before launch.
- Accessibility, privacy, cookies and complaints are governed by the linked policies and notices.
5. Procedure and escalation
- Material term changes are dated and published clearly. Authenticated-service terms are not changed through this public page alone.
- Suspected abuse or security testing without authority is logged and may be restricted or reported.
- A takedown or intellectual-property complaint is assessed promptly and the affected content restricted where appropriate while facts are reviewed.
- Clinical information submitted accidentally is handled under privacy and incident procedures, not answered as a public medical consultation.
6. Roles and responsibilities
Legal/Product leads
approve accurate, fair terms and status wording.
Content owners
date and substantiate material claims.
Security
protects the service from abuse.
Users
use the site lawfully and follow urgent-care boundaries.
DPO/Accessibility leads
maintain linked notices and access routes.
7. Records, confidentiality and retention
Keep term versions, publication dates, claim approvals, abuse/takedown reports, decisions and material notices.
Records created under this policy must be accurate, attributable, access-controlled and linked to the applicable retention schedule. Where a provider is the controller or authoritative record holder, its documented instructions and legal duties apply.
8. Monitoring, assurance and review
Review annually and after business, product, legal or market change. Audit links and statements about product status, evidence and NHS relationships.
Material non-compliance is reported through the relevant clinical-safety, patient-safety, data, security, safeguarding, HR, contractual or whistleblowing route. Corrective actions receive an owner, target date and effectiveness check.
9. Training and communication
The policy owner identifies which roles require awareness, operational or specialist training. Training is accessible, version-controlled, role-specific and refreshed after material change or evidence that understanding is inadequate. Providers communicate local procedures and contact routes before users are granted access.
10. Related documents
11. Approval record
| Role | Name | Decision/date |
|---|---|---|
| Policy owner | To be completed | Draft pending approval |
| Clinical/technical specialist | To be completed | Draft pending approval |
| Board or delegated committee | To be completed | Draft pending approval |