Not everyone in the clinic needs to read every note. Patient Privacy lets you limit clinical notes to the treating practitioner, which matters most for mental health, sexual health and staff who are also patients.

Settings are per location

Open Settings, then Patient Privacy. The page shows the settings for one location, named at the top with who last changed them and when. An administrator in a clinic with more than one location can switch location there and set each one differently, for example stricter at a site with a public waiting area. Save after changing; the confirmation names the location you saved.

Privacy restrictions apply to administrators too. Once notes are limited to the treating practitioner, an administrator can't read them either. Decide who covers for a practitioner on leave before switching it on.
The Patients Privacy page for Riverside Physiotherapy, showing Browser page title set to Initials, the Invoices and payments and Booking notifications anonymisation switches on, and Email invoices and receipts on.
Privacy settings for the Riverside location, with the browser title set to Initials and both anonymisation switches on.

Patient name display

Browser page title decides what the browser shows as the page name while a patient's record is open, which is what anyone glancing at the screen, the taskbar or an open window list can read. Choose First name, Full name, Initials or Anonymous. This only changes the title; the record itself is unchanged. The browser's own history still keeps past titles, so on a shared computer this is one layer of privacy, not a guarantee.

Patient anonymisation

Deleting a patient removes their record, but invoices and payments have to stay for the accounts, and some notifications have already gone out. Two switches limit what identifies the patient in those places:

  • Invoices and payments: after a patient is deleted, their identifying details are removed from their invoices, payments and the notes attached to them. The amounts and dates stay, so totals and reports still add up.
  • Booking notifications: the notifications staff receive about bookings, cancellations and practitioner schedules use anonymised patient details instead of names.

Both are off in a new clinic. Deleting a patient is covered in Archive, restore or delete a patient.

Patient financial data

Email invoices and receipts is on by default. Switch it off for a location where patients shouldn't receive invoice and payment receipt emails from ClinyPal at all, for example where a third party bills, or where the clinic prints and hands over every invoice. Invoices can still be sent by hand from the invoice itself.