Medi-Bridge Terms of Service

Effective Date: October 13, 2025
Last Updated: March 30, 2026

Welcome to Medi-Bridge!

These Terms of Service explain the rules for using our healthcare platform. We've tried to keep things clear and straightforward, but if you have questions, we're always here to help.

By creating an account or using Medi-Bridge, you're agreeing to these terms. If you don't agree with them, please don't use our services.

Who we are

Medi-Bridge Technology Ltd
Hulm Club, 1st Floor
57 Farringdon Rd
London EC1M 3JB

Email: hello@medi-bridge.org
Phone: 07460794747
Data Protection Officer: Zahra Uddin

We comply with UK GDPR and the Data Protection Act 2018.

What these terms cover

Key definitions

To keep things clear, here's what we mean by:

"Medi-Bridge," "we," "us," "our" - that's us, Medi-Bridge Technology Ltd
"You," "your" - that's you, the person using our platform
"Services" - our website, apps, and all the features we provide
"Account" - your personal profile on our platform
"Healthcare Provider" - licensed medical professionals using our platform
"Patient" - people seeking healthcare through our platform
"Health Data" - your sensitive medical information

Who can use Medi-Bridge

Age requirements

You need to be at least 18 to create your own account.

Account registration

When you sign up, you must:

Provide accurate, complete professional information using your legal name
Use a professional email address
Keep all details current and notify us of changes to licenses or credentials
Choose a strong password and keep it secure
Never share your account or allow unauthorised access
Take responsibility for all activities under your account

Account termination

We may suspend or terminate your account if:

You breach these terms
Your professional license expires, is suspended, or revoked
You violate healthcare laws or professional standards
Your account poses a security risk
You fail to pay applicable fees
Required by law or regulatory authority

You may terminate your account anytime by contacting hello@medi-bridge.org

2. Permitted Use

What you can do

Use Medi-Bridge to:

Create patient profiles
Manage patient records and health information
Securely collect data from patients and write doctor notes to create a patient record
Submit images, files, attachments and audio recordings to a patient’s record for remote monitoring and management of patients’ conditions
Document consultations, assessments, and treatment plans
Connect and collaborate with healthcare professionals for review of patients’ conditions

Professional obligations

You must:

Follow all healthcare laws, regulations, and professional codes of conduct
Practice within your scope of licensure and competence
Maintain patient confidentiality at all times
Obtain informed consent as required
Keep accurate and timely clinical records
Comply with UK GDPR and data protection laws
Report suspected data breaches immediately

What's prohibited

You must not:

Break any laws or regulations
Impersonate another person or share your account
Use the service for fraudulent or illegal purposes
Upload malware or attempt to breach security
Access patient records without legitimate clinical need
Practice outside your scope or without proper licenses
Share patient information inappropriately
Prescribe medications unlawfully
Post false or misleading medical information
Copy, sell, or redistribute our content
Use automated systems without written permission

3. Intellectual Property

What we own

All platform content, including software, design, trademarks, logos, and databases, belongs to Medi-Bridge and is protected by intellectual property laws.

Your license

We grant you a limited, non-exclusive, non-transferable, revocable license to use our platform solely for legitimate clinical purposes. You cannot copy, modify, distribute, or create derivative works.

Clinical content you create

You retain ownership of clinical documentation you create. By using Medi-Bridge, you grant us a license to store, process, and display your clinical content solely for:

Providing the services to you
Facilitating patient care
Complying with legal requirements
Creating anonymised data for service improvement

You warrant that you have all necessary rights and consents for content you upload.

4. Data Protection and Privacy

You are the Data Controller for your patients' health data
We are the Data Processor acting on your instructions
We are the Data Controller for your account and usage data

Your obligations as Data Controller

You're responsible for:

Having a lawful basis to process patient data (Article 6 and Article 9 GDPR)
Obtaining appropriate consent from patients
Informing patients about data use and their rights
Ensuring patients can exercise their data rights
Reporting data breaches to the ICO within 72 hours if high-risk
Maintaining records of processing activities

How we protect data

Technical security:

AES-256 encryption for data at rest
TLS 1.3 encryption for data in transit
Role-based access controls
Regular security audits and penetration testing
ISO 27001, ISO 27017, ISO 27018, and SOC 2 Type II certified infrastructure

Data storage:

Neon PostgreSQL on AWS Europe West 2 (London, UK); AWS S3 file storage in Frankfurt, Germany (EU)
No transfers outside UK/EEA without appropriate safeguards
Google Workspace (EU), Sentry (EU), PostHog (EU with explicit consent only)

Offline functionality and encrypted local storage: Where offline access is enabled, we may cache data on your device so you can work without connectivity; sensitive cached data is stored encrypted in the browser, with keys cleared on logout. You can clear offline data from your profile; logout also clears encrypted offline storage and application caches. Pending changes sync when you are online again. Offline data may be cleared if your organisation disables offline access or after extended inactivity. Use a strong device lock (password, PIN, or biometrics) so cached data is not easily accessible if the device is lost or stolen while unlocked.

Your rights

For your account data, you can:

Access, correct, or delete your information
Restrict processing or object to certain uses
Download your data in portable format
Withdraw consent at any time

Contact hello@medi-bridge.org to exercise these rights (response within 30 days).

Patient data rights requests must be handled by you as Data Controller. We'll assist with necessary tools and exports.

Data retention

Clinical/patient data: 7-10 years from last consultation (per medical regulations)
Account data: Active period plus 7 years after closure
Communications: 3 years after last message
Technical logs: 2-3 years

Secure deletion using cryptographic erasure when retention periods expire.

Data breach notification

In the event of a breach:

We'll notify you within 24 hours
Provide details and our response
Assist you in assessing risk
Notify the ICO within 72 hours where required
You must inform affected patients if high-risk

See our Privacy Policy for complete details.

5. Third-Party Services

Our platform may link with third-party services. We're not responsible for:

Their content, accuracy, or availability
Their privacy practices or security
Service interruptions or data breaches
Their compliance with regulations

Review their terms and ensure they meet your compliance requirements before use. Integrations may be discontinued anytime and are provided "as is."

6. Disclaimers

Service disclaimer

THE PLATFORM IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND. We don't guarantee:

Uninterrupted, secure, or error-free service
Complete accuracy or data integrity
Compatibility with all systems
That services will meet your specific requirements

Clinical responsibility

YOU ARE SOLELY RESPONSIBLE FOR ALL CLINICAL DECISIONS AND PATIENT CARE.

Medi-Bridge is a coordination tool. We:

Don't provide medical advice, diagnosis, or treatment
Don't practice medicine or make clinical decisions
Aren't responsible for your clinical judgments
Don't verify accuracy of clinical content you create

Any clinical decision support tools are informational only and should not replace your professional judgment. Always verify critical information independently.

7. Indemnification

You agree to indemnify and hold harmless Medi-Bridge from claims arising from:

Your use of the platform or breach of these terms
Your clinical practice, including malpractice claims
Patient injuries or harm
Data protection violations or breaches of confidentiality
Your content or infringement of others' rights
Violations of laws or regulations

This includes all costs, damages, and reasonable legal fees. You must cooperate with our defense and may not settle without our consent.

8. Dispute Resolution

Governing law and jurisdiction

These terms are governed by the laws of England and Wales.

UK clinicians: Exclusive jurisdiction of English courts
EU clinicians: English courts or your home country
Others: Exclusive jurisdiction of English courts

Informal resolution required

Before formal proceedings, contact hello@medi-bridge.org and attempt good-faith negotiations for 30 days.

Time limit

Claims must be brought within one year after the cause of action arises.

9. Changes to Terms

We may modify these terms at any time. For material changes:

30 days' advance notice via email and platform notification
Continued use after effective date constitutes acceptance
You may terminate your account before changes take effect if you disagree

Non-material changes (clarifications, corrections) may take effect immediately.

10. Termination

By you

Terminate anytime via account settings or hello@medi-bridge.org. Export your data before termination.

By us

We may terminate immediately for:

Breach of terms
Expired or revoked professional license
Violations of healthcare laws
Security risks or illegal activity
Non-payment of fees

Effect of termination

Upon termination:

Your access ceases immediately
You have 30 days to export clinical data
Data retained per medical record regulations (7-10 years)
Account data retained 7 years for compliance

Sections on intellectual property, data protection, disclaimers, liability, indemnification, and dispute resolution survive termination.

11. General Provisions

Entire agreement

These terms and our Privacy Policy constitute the complete agreement and supersede all prior agreements.

Amendments and assignment

Terms can only be modified as described in Section 9
No verbal modifications are valid
You cannot assign or transfer your account
We may assign our rights without restriction

Severability

If any provision is unenforceable, the remaining provisions remain in effect.

No third-party beneficiaries

These terms don't create rights for anyone except you and Medi-Bridge (and our affiliates who can rely on limitations).

Force majeure

We're not liable for failures due to circumstances beyond our control (natural disasters, pandemics, infrastructure failures, government actions, cyber attacks).

Relationship

You're an independent contractor. These terms don't create an employment, partnership, or agency relationship.

Electronic communications

You consent to receive communications electronically. These satisfy any "in writing" requirements. Maintain a valid email address and check it regularly.

Notices

To us: hello@medi-bridge.org

Notice is effective when sent (email) or posted (platform).

Professional compliance

You remain subject to all professional regulatory requirements. Your professional body's standards take precedence in case of conflict. Notify us of any regulatory actions or license changes.

Survival

Provisions that by their nature should survive termination remain in effect, including intellectual property, data retention obligations, disclaimers, liability limitations, indemnification, and dispute resolution.

Contact Information

Email: hello@medi-bridge.org
DPO: Zahra Uddin
Phone: 07460794747

Address: Hulm Club, 1st Floor, 57 Farringdon Rd, London EC1M 3JB

Regulatory authority: Information Commissioner's Office (ICO)
Website: https://ico.org.uk | Phone: 0303 123 1113

Acceptance

By clicking "I Accept," creating an account, or using our services, you confirm that you:

✓ Have read and understood these Terms of Service
✓ Agree to be bound by these terms and our Privacy Policy
✓ Are a licensed healthcare professional authorised to use this platform
✓ Have authority to enter into this agreement
✓ Will comply with all applicable laws and professional standards
✓ Understand your professional responsibilities and liabilities
✓ Acknowledge Medi-Bridge is a platform tool, not a substitute for clinical judgment

Version: 1.2

Effective: October 13, 2025