ElliPath – Terms & Conditions of Use
Last updated: 09/01/2026

These Terms and Conditions (“Terms”) govern your use of the ElliPath platform (“ElliPath”, “we”, “our”, “us”). By accessing or using ElliPath, you agree to be bound by these Terms.

1. Purpose of Elli Path

ElliPath is a professional digital workspace designed to support medical professionals in organising, mapping, bundling and preparing evidence for regulatory portfolio submissions (including but not limited to the GMC Portfolio Pathway / CESR process).

ElliPath does not provide medical advice, legal advice, regulatory decisions, or certification of application readiness.
Final responsibility for all submissions remains with the user.

2. User Responsibilities

You agree that:

You are solely responsible for:

the accuracy of your uploaded content

compliance of your submissions

final decisions regarding what you submit to any regulator

ElliPath provides guidance, structuring and workflow support only.

You will not rely on ElliPath as a substitute for professional regulatory advice.

3. Data Ownership & Control

You retain full ownership of all content you upload.

ElliPath does not claim ownership of your documents, evidence, reflections, or metadata.

We process your data solely to provide platform functionality.

4. Identifiable Data & Redaction Responsibility

ElliPath is built to support anonymisation workflows, however:

You remain responsible for ensuring that all uploaded content is compliant with GMC and data-protection anonymisation requirements.

ElliPath does not guarantee that any document is “fully anonymised”.

We provide tools and indicators to assist — not replace — your professional responsibility.

5. Deletion of Identifiable Data

You have the right to:

Delete individual documents

Delete bundles

Delete your entire account at any time

Upon deletion:

All identifiable personal data is permanently removed from active systems.

Backup data is automatically purged within a defined retention window.

We do not retain your clinical documents after account deletion.

This ensures your full right to erasure (GDPR Article 17) is upheld.

6. Platform Security

We implement:

Encrypted storage

Secure access controls

Role-based permissions

Industry-standard infrastructure protection

Audit-logging of sensitive actions

You agree to:

Keep your login details secure

Not share accounts

Notify us immediately of suspected unauthorised access

You are responsible for any activity carried out under your account.

7. Use of AI Assistance

AI features may be used to:

Suggest mappings to curriculum outcomes

Assist with structuring

Summarise content

Generate organisational suggestions

AI outputs are:

Advisory only

Not regulatory decisions

Not professional certification

Final review and judgement remains entirely with the user.

8. Prohibited Use

You must not:

Upload unlawful, defamatory or infringing material

Upload third-party confidential material without rights

Attempt to reverse engineer or exploit the platform

Use ElliPath to submit fraudulent applications

9. Account Suspension

We reserve the right to suspend or terminate accounts that:

Breach these Terms

Pose a data-protection or regulatory risk

Are involved in misuse, fraud, or abuse

10. Limitation of Liability

To the maximum extent permitted by law:

ElliPath is not liable for regulatory outcomes

We are not responsible for rejected applications

We are not liable for indirect or consequential loss

You use ElliPath entirely at your own professional discretion.

11. Changes to These Terms

We may update these Terms from time to time. Continued use of ElliPath constitutes acceptance of any updated version.

12. Governing Law

These Terms are governed by the laws of England and Wales.
ElliPath – Terms & Conditions of Use
ElliPath – Privacy Policy

Last updated: 09/01/2026

This Privacy Policy explains how ElliPath (“we”, “our”, “us”) collects, uses, stores and protects your personal data when you use our platform and website.

ElliPath is committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.

1. Who We Are

ElliPath is a digital platform designed to help medical professionals organise, prepare and manage regulatory portfolio evidence.

For the purposes of data protection law, ElliPath acts as the Data Controller for your account information and as a Data Processor for the documents and evidence you upload.

2. What Data We Collect

We may collect:

Account & Contact Data
Name

Email address

Professional role and specialty

Subscription status

Payment information (handled by third-party processors)

Uploaded Content
Documents, reflections, evidence files

Metadata and tags

Curriculum mapping data

Technical Data
IP address

Device and browser type

Usage logs

Access times and activity records

3. How We Use Your Data

We use your data to:

Provide and maintain the ElliPath platform

Process subscriptions and payments

Enable document organisation and AI assistance

Communicate with you about your account

Provide customer support

Improve platform performance and safety

Meet legal and regulatory obligations

4. AI Processing

Uploaded content may be processed by AI systems solely for:

Structuring

Mapping

Summarising

Workflow assistance

AI outputs are advisory only.
We do not use your documents to train public AI models.

5. Marketing & Promotional Communications

We may use your email address to:

Send platform updates

Feature releases

Service announcements

Educational resources

Early access offers

Beta programmes

Promotional offers related to ElliPath

You can opt out of marketing emails at any time by:

Using the unsubscribe link

Updating your account preferences

Contacting us directly

We will never sell your data to third parties.

6. Lawful Basis for Processing

We process your data under:

Performance of a contract (platform services)

Legitimate interests (security, platform improvement)

Legal obligations

Your consent (for marketing communications)

7. Data Storage & Security

We protect your data using:

Encrypted storage

Secure servers

Access controls

Audit logging

Regular security reviews

8. Data Retention

Account data is retained while your account is active

Uploaded documents are retained only while your account exists

Deleted data is permanently removed within defined retention windows

Backups are securely purged on a rolling schedule

9. Your Data Rights

You have the right to:

Access your data

Correct your data

Delete your data

Restrict processing

Object to processing

Withdraw consent for marketing

Request data portability

Requests can be made by contacting us at: [insert contact email]

10. Cookies

We use cookies for:

Login sessions

Security

Performance monitoring

Analytics

You can manage cookie preferences via your browser settings.

11. Third-Party Services

We may use trusted service providers for:

Hosting

Payment processing

Analytics

Email communications

They are contractually bound to protect your data.

12. Children’s Data

ElliPath is not intended for use by children.
We do not knowingly collect children’s data.

13. Changes to This Policy

We may update this policy periodically. Continued use of ElliPath indicates acceptance.

14. Contact

For any privacy concerns, contact:

ElliPath
[email protected]