Privacy notice
What this site collects, what the CHS platform holds once deployed, and on what basis.
This document covers two different things
This public site, published by Obosu to describe CHS. It holds no health data and never will.
The CHS platform itself, as deployed for a customer. That does hold health data, and the section below describes how it is handled.
What this site collects
Nothing you have not typed yourself. No accounts, no advertising trackers, no third-party analytics.
If you complete the request-access form, we keep what you write in it: your name, your organisation, your role and your message, so that we can reply.
Our hosts keep technical logs — IP address, timestamp, page requested — for security and diagnosis. They are used for nothing else.
Who processes this for us
Microsoft Azure hosts the application and the database, currently in the UK South region, in the United Kingdom.
Cloudflare provides DNS, caching, the web application firewall and rate limiting. Traffic to this site passes through their servers.
No other third party receives this data. Nothing is sold, and there is nothing to sell.
The deployed CHS platform
Each customer gets its own database and its own instance. One organisation's data is not reachable from another: isolation sits at the database boundary, not the query boundary.
The customer is the controller of their patients' data. Obosu acts as processor.
Every read of patient data and every change writes an append-only audit record: who, what, when, and under which permission. Those records are never edited.
How long it is kept
A request for access is kept for two years, then deleted.
Technical logs are kept for thirty days.
Health data inside a customer instance follows that customer's retention rules, because they are responsible for it.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it.
If your request concerns a health record held by a facility, ask that facility first: they are responsible for it, not us.