1. Introduction & Scope
ClinicaliQ (operated by MedicalGoGo Ltd) collects and processes data about registered Healthcare Professionals (HCPs) to provide clinical intelligence services. This policy explains how we handle HCP data in relation to pharmaceutical company partnerships.
2. What Data We Hold About HCPs
- Full name, title, professional email address
- Professional registration number (GMC/NMC/GPhC/HCPC) — verified at registration
- Clinical role, specialty, and therapeutic area interests
- Platform activity (guideline views, CPD module completions, webinar attendance, trial interactions)
- Consent preferences, including opt-in status for pharmaceutical promotional content
- IP address at point of consent registration (audit trail only)
3. How We Receive HCP Data
All HCP data is collected directly through HCP self-registration at clinicaliq.co.uk/register/. ClinicaliQ does not purchase, import, or receive HCP lists from pharmaceutical companies or any third party. Every registered HCP is a verified UK healthcare professional who has actively registered on the platform.
4. How We Store HCP Data
- Infrastructure: Contabo VPS, EU-based data centre, Ubuntu OS
- Transmission security: TLS 1.2+ (HTTPS enforced site-wide)
- Database: MySQL with access restricted to MedicalGoGo Ltd authorised personnel
- Backups: Daily encrypted backups, 30-day retention
- Access controls: Role-based; only designated staff access HCP records
5. What We Share With Pharmaceutical Companies
ClinicaliQ shares ONLY the following with pharmaceutical partners:
- Aggregated, anonymised campaign metrics (total impressions, engagement rates, click-through rates)
- Audience reach counts broken down by specialty and UK region (no individual identifiers)
- Post-campaign survey results (aggregated; minimum cohort of 5 before any breakdown is shown)
ClinicaliQ does NOT share: HCP names, email addresses, registration numbers, or any personally identifiable information with pharmaceutical companies. Pharmaceutical companies receive campaign analytics only, never HCP contact details.
6. Retention & Deletion Schedule
- Active HCP accounts: retained for the duration of membership plus 2 years post-closure
- CPD and continuing education records: 7 years
- Consent records (pharma opt-in audit trail): 6 years from date of consent or withdrawal
- Professional registration numbers: deleted upon account closure
- Deletion requests: fulfilled within 30 days — contact [email protected]
7. HCP Rights Under UK GDPR
Registered HCPs have the right to: access their data, rectify inaccuracies, request erasure, data portability, restrict processing, and object to processing. HCPs may withdraw consent for pharmaceutical promotional content at any time via Account Settings > Communication Preferences, without affecting their platform access or CPD records. To exercise any rights, contact: [email protected]. HCPs may also lodge a complaint with the ICO at ico.org.uk.
8. Contact & Document Information
Data Controller: MedicalGoGo Ltd | Operator: Dr Anzal Qurbain MBBS FFPM
Privacy contact: [email protected]
Document version: 1.0 | Date: March 2026