Surgical Journey
Privacy Policy
Last updated 28 July 2026. This policy explains how Care Journey collects, uses, and protects participant data across every hospital and care program delivered on this platform, including via WhatsApp.
Who this applies to
This policy covers every participant enrolled in a recovery or care program delivered through Care Journey by a participating hospital or clinical partner (a “tenant”), regardless of which specific program or condition pathway you were enrolled into.
Information we collect
We collect the information needed to run your care program: your name and contact details (including your WhatsApp number), preferred language, your relationship to the patient (participant/caregiver), your responses to program prompts and check-ins, reminder preferences, uploaded documents (such as discharge summaries), message timestamps, and enrollment/program status changes.
How we use it
Your information is used to deliver onboarding, scheduled check-ins, reminders, follow-up guidance, and to route you to a clinical reviewer when your responses indicate that human follow-up is needed. We also use aggregated, de-identified data to help your care team and sponsoring organizations understand program outcomes.
WhatsApp messaging
Program messages are sent over WhatsApp. Standard messaging and data rates from your carrier may apply. You can stop receiving routine messages at any point during onboarding or by contacting your care team directly; declining consent stops further automated outreach for that program.
Sharing and access
Your data is shared only with the hospital or clinical team that enrolled you, the clinicians and operations staff authorized to support your program, and the technical systems required to run the journey (including our WhatsApp messaging provider). We do not sell participant data. Any sponsor-facing reporting is aggregated and suppressed to avoid identifying individual participants.
Data retention
We retain program data for as long as needed to deliver your care program and to meet the clinical record-keeping and legal obligations of your enrolling hospital, after which it is deleted or anonymized in line with that hospital’s retention schedule.
Your rights and choices
You may ask your enrolling hospital or care team to access, correct, or delete your program data, or to stop future messages, at any time. Requests are handled by the hospital or clinical partner that enrolled you, since they control your care record.
Security
We use role-based access controls and tenant data isolation so that only staff authorized for your specific hospital and program can view your information.
Changes to this policy
We may update this policy as the service evolves. Material changes will be reflected by updating the date above.
Contact us
Questions about this policy or your data should be directed to your enrolling hospital or clinical partner, or to Care Journey’s privacy team at [privacy contact email to be added].