Privacy notice
What CritCare Ultrasound holds about you, why, where it's kept and who can see it. Rewritten 12 November 2026 for units beyond Salford.
Who we are
CritCare Ultrasound is run by Cranfield Quinn Medical Ltd. You can reach us through Contact us. Each unit that uses the site decides to use it and runs its own space on it; see the terms of use for who is responsible for what.
What we hold
The details you give when you sign up: name, email, job grade, specialty, hospital, GMC or NMC number and, if you add one, a phone number. Then your training record: training cycles, logbook entries, scans and reviews, competency sign-offs, assessments, session bookings and, at Salford, audit submissions. Ultrasound clips you upload are stored with your own scans.
We don't hold anything that identifies a patient. Clips must be anonymised before they're uploaded, and logbook entries use only a local reference (see below).
When something on the site goes wrong, an error report goes to our error-monitoring service (Sentry) so we can fix it. Reports contain technical details only, such as the page and the error message: not your name, email, IP address or anything you've typed.
Why we hold it
To run your training: to show your progress, let your trainers review and sign off your work, let your unit's admins see how training is going, and send you the emails the site needs to (approvals, reviews, reminders and a weekly digest you can turn off). We don't sell your data or use it for marketing.
Who can see it
The people in your unit who need to: your trainers, and your unit's admins. Nobody in another unit can see your record. If you move units, your record moves with you when both units agree. To help with a support question, the site's owner can look at a unit's pages read only, including seeing the site as a particular person sees it. Nothing can be changed while they do, and each time is listed for that unit's admins in Unit settings.
Where it's kept
Your records are in a database in London, and the site itself runs in London. We use a few services to do that:
- Supabase: the database, in London
- Vercel: runs the site, in London
- Cloudflare R2: stores uploaded clips
- Resend: sends the site's emails
- Sentry: error reports, in the EU, with no personal details
Some of these companies are based in the US. Where your data passes through them, it's covered by the safeguards UK data protection law requires.
Clinical images
Images saved on the ultrasound machine are part of the clinical record and carry the patient's details, as they must. Anonymisation applies when an image leaves the machine to be shared for training: clips uploaded here must have no patient-identifiable information in the image, the file name or the file's hidden data. Patient references in the logbook are local identifiers only and can't be traced back to a patient from this site. Following your own Trust's rules on this is your responsibility and your unit's; see the terms of use.
How long we keep it
While your account is open, and afterwards as described below. Uploaded clips are kept for up to three years. Your reports and PDFs stay as part of your training record.
Closing your account
You can close your account yourself, in the app or on the web, from You → Close your account. That signs you out everywhere, stops any further sign-in, and deletes your email address, phone number, GMC number, saved signature and push-notification registrations. Your training record (scans, sign-offs, sessions) stays under your name as part of your unit's training governance; ask your unit admin what is held and for how long.
Your rights
You can ask to see, correct or delete what's held about you, or object to how it's used. Ask your unit admin first, or us through Contact us. If you're not happy with the answer, you can complain to the Information Commissioner's Office (ico.org.uk).