Privacy notice · 13 September 2026
What we do with what you type
This notice covers plinthhealth.com, which today is one page explaining a product and one form for joining its waitlist. It does not describe what Plinth does with a practice's patient records, because no practice is using it yet; when one is, that relationship gets a data processing agreement of its own and this notice will say so.
Who is responsible
Plinth is the data controller for everything described here. The way to reach us is the message box on the waitlist form, or a reply to any email you get from us. There is deliberately no address published here that nobody is reading.
What we collect, and only when you give it
- Your email address, because a waitlist without one is a list of nobody.
- Your practice's name, if you fill that box in. You need not.
- Whatever you write in the message box, which we read to decide what to build next.
- The date you signed up, so the list has an order to it.
That is the whole of it. We do not ask for a phone number, we do not buy anything about you from anywhere else, and we do not attempt to work out who you are from your address.
Why we are allowed to hold it
Your consent, given by choosing to fill in a form whose only purpose is to be told about one thing. You can withdraw it at any time and we will delete the record rather than mark it inactive.
How long we keep it
Until Plinth opens to practices and you have had the chance to decide, or until you ask us to delete it — whichever is sooner. A waitlist that outlives its own purpose is just an old list of strangers, so this one gets deleted when it has done its job.
Cookies, analytics and tracking
There are none. This site sets no cookie, runs no analytics, embeds no tracking pixel and loads nothing from a third party — not even the typefaces, which are served from this domain precisely so that your visit is not announced to a font CDN. That is why there is no cookie banner: there is nothing to consent to.
The one log that does exist
The content delivery network in front of this site writes a standard web access log, which includes your IP address, the page requested and the time. We keep it for thirty days and use it only to see whether the site is working and to notice abuse. We do not build a profile from it and it is never joined to anything on the waitlist.
Who else sees it
Amazon Web Services, who host this site and store the waitlist, in their London region. They process it on our instructions and for no purpose of their own. Nobody else — we do not sell it, share it, or pass it to an advertising network, and there is no third party embedded in this page that could take it without being asked.
Where it is
The United Kingdom. The waitlist is stored in AWS's eu-west-2 (London) region, and the content delivery network serves cached copies of these two public pages from wherever you are, which is a different thing from your data being there.
Your rights
Under UK GDPR you may ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to our holding it, or ask for it in a portable form. Ask through the form and we will do it. If you think we have handled this badly you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so there is something to fix.
Changes
The date at the top is the date this was last changed. If it changes in a way that matters to somebody already on the list, they will be told rather than left to notice.