For staff at Wye Valley Surgery · Last updated: 7 August 2026
PracticeKit is operated by Aryash Health Limited (Companies House no. 17001109; ICO registration ZC086802). We are the data controller for the personal data processed through this service. Our Clinical Safety Officer is Dr Krishnan Pasupathi (GMC: 6050795), GP Partner at Wye Valley Surgery, High Wycombe.
The tools are supplied to the practice under an Information Governance Agreement (version 1.0), to be agreed and signed at a forthcoming partners' meeting. The agreement lists the tools in use and is re-agreed before any new tool is introduced.
No tool currently in use processes patient-identifiable data. The tools available to you are staff and practice tools: guidance, reference material, scheduling, wellbeing and partnership business. This notice therefore explains how we handle information about you, as a member of practice staff.
Some tools that handle patient information have been built but are not in use and not available to staff. They are out of scope of the current agreement. None will be switched on until it has passed its own governance and clinical safety review, the agreement has been re-agreed, and this notice has been updated to describe it.
The tools in use handle three kinds of information only.
Practice documents and reference material
Policies, procedures, guidance and rotas. May contain staff names and internal contacts; access is restricted accordingly. Used by Safeguarding, the Learning hub, the Neighbourhood Health Guide and the patient safety (PSIRF) workspace.
Staff personal data
Information about you: leave and scheduling in the Rota, and the content of your own private reflective sessions in Practice Pulse. Session content is visible only to you — enforced in the database, not just on screen. See section 5.
Practice business information
The Practice Cockpit and the Partners' Corner hold the partnership's own business record: figures the partners enter by hand, the practice-year planner, the meeting record (agendas, notes, minutes and actions) and the partnership's decisions log. They name partners and may name staff in the ordinary course of partnership business. They hold no patient information by design. See section 8.
We do not collect:
Three tools hold your own material and work differently from the rest. All are voluntary.
Cloak strips identifying details from text before you paste it into an AI tool, and restores them in the reply. The whole exercise runs in your own browser: the pasted text and the list of what was replaced never reach Aryash Health systems. The platform records only a metadata audit trail — who used the tool and when, with document length and identifier counts.
The optional second check sends the already de-identified text to Claude, the AI model our other tools use (see section 7), which returns advisory flags only and never rewrites your document. Cloak is for non-clinical and administrative documents only.
All AI processing and data storage take place within the United Kingdom or the European Economic Area. The UK's adequacy regulations treat the EEA as providing equivalent protection. No tool uses a US or global processing region.
AWS does not use your inputs or outputs to train AI models; Claude models on Bedrock are served by AWS under AWS's terms, not by Anthropic directly. Data processing agreements with all providers are on file in Aryash Health governance records.
The Practice Cockpit is the partnership's business meeting platform. Access is closed by default and granted individually, by name: GP partners, plus any managers the partners invite. Invited managers see only what is recorded after 7 August 2026 — everything written before that date remains visible to partners only. A meeting summary reaches anyone else only when a partner chooses to email it — the tool sends nothing on its own.
The Partners' Corner is a separate, partner-only space for the partnership's own business, with its own record kept apart in the database. Its content is never shown to, or summarised for, anyone who is not a partner.
In Meeting mode an AI wrap-up drafts the minutes, decisions and actions. A partner reviews, edits and approves that draft; nothing becomes the record without that approval. Once approved, minutes are locked against further change at database level, and the record stamps who approved them and when.
Staff accounts remain active until deactivated by the practice. Practice Pulse content is retained until you delete it. Anonymous wellbeing submissions carry no identifier and are retained in aggregate. Partnership records in the Practice Cockpit and Partners' Corner are retained as the partnership's own business record.
Under UK GDPR, you have the right to:
Anonymous wellbeing submissions cannot be linked back to you by design, so they cannot be retrieved or deleted on request. This is stated before you submit. Practice Pulse content is yours to read and delete at any time.
Aryash Health Limited assesses every tool for clinical safety before it is made available, under a clinical risk management process aligned with DCB0129, overseen by a named Clinical Safety Officer. None of the tools in use is clinical decision support; clinical judgement always remains with the clinician.
PracticeKit uses essential cookies only for authentication and session management. We do not use tracking or advertising cookies.
For privacy queries or to exercise your rights:
Aryash Health Limited
Email: yadavakrishnan.pasupathi@nhs.net
You may also contact the Information Commissioner's Office (ICO) at ico.org.uk
© 2026 Aryash Health Limited. This notice is reviewed annually, or sooner if a tool's data handling changes or a new tool enters use. Full Data Protection Impact Assessment available on request.