GDPR information sheet

Last updated: 7 August 2026

This sheet supplements the Privacy Policy with GDPR and UK GDPR focused information, especially for special category (health) data that may appear in team tasks and patient labels. It does not replace legal or DPO advice for your hospital or agency.

1. Roles: who is controller?

  • BetterCall as operator: For account data, product data tied to your login (including housing, jobs, portfolio, and personal tasks), infrastructure logs, and platform security, BetterCall.ie typically acts as a controller (or joint controller where agreed in writing with a partner).
  • Team tasks: For patient labels, shared ward or job lists, and related handover content entered in team workspaces, the healthcare organisation and treating clinicians usually act as controllers for clinical care. BetterCall provides the processing environment and should be treated as a processor (or sub-processor) for that content unless a separate agreement states otherwise.

2. Special category data (Article 9)

Health data and related categories receive extra protection under the GDPR and UK GDPR. Team tasks and patient labels are only appropriate where an appropriate Article 9 basis applies (for example explicit consent and/or provision of health care under national law). In-app notices are educational and do not transfer legal liability to BetterCall.

3. Data minimisation and purpose limitation

Enter only the minimum identifiers needed for handover (for example ward, bed, and a short label). Team tasks and team chat are for care-team coordination and job lists. They are not a medical record. Do not paste identifiable patient information into general reference, portfolio, or job AI helpers.

4. Team tasks vs team chat

Team tasks and patient labels are readable by authorised members of your team for handover and job coordination. Team chat uses end-to-end encryption for message content (ciphertext at rest); we are not designed to read those bodies. Chat photos are stored encrypted on the platform and are not written to your device photo library. Metadata (membership, timestamps, sender identifiers, and operational task links) may still be processed for delivery and abuse prevention. Chat messages and chat photos are retained for 7 days then removed; the team tasks board is the durable job list. Hospital discovery is opt-in peer discovery among doctors at the same hospital, not an official roster.

5. Location and subprocessors

Team task and related collaboration data is stored in the European Economic Area (or the United Kingdom where applicable under UK GDPR). Access is limited to authorised members of your team. The Privacy Policy lists the subprocessors that process data on our instructions. Where data leaves the EEA or UK, we rely on vendor safeguards (including Standard Contractual Clauses) as offered at the time of processing.

6. Data subject rights

Individuals have rights including access, rectification, erasure, restriction, portability, and objection, subject to exemptions (for example statutory retention of medical records). Patients should normally contact their care provider first. You may contact conor@bettercall.ie for platform-held copies or technical assistance where we are not prevented by law.

7. Supervisory authority

If you are in Ireland, you may contact the Data Protection Commission: www.dataprotection.ie. If you are in the United Kingdom, you may contact the Information Commissioner's Office: www.ico.org.uk.

8. Contact

Contact: conor@bettercall.ie.

Related documents