Privacy notice

Last updated: 28 July 2026

What the service holds

PathologyPoints.uk processes authorised user-account information and cellular pathology workload activity on behalf of subscribing organisations. Customer organisations determine the purposes and lawful basis for their use of the service.

Patient information

PathologyPoints.uk is not a patient record system. Users must not enter patient names, dates of birth, NHS numbers, hospital numbers, diagnoses or other patient-identifiable information into free-text fields.

Service operation

Account, security and audit information is used to authenticate users, protect the service, investigate incidents and demonstrate controlled changes. The separate Control console receives environment-health and release metadata, not customer consultant activity or point totals.

Retention and rights

Retention is configured by the customer organisation subject to mandatory security and audit evidence. Requests about access, correction or other data rights should normally be directed to the organisation providing your account. Service privacy enquiries can be sent to privacy@pathologypoints.uk.