Acceptable Use Policy

Last updated: 28 March 2026

1. Permitted Uses

MedFlow is designed for legitimate medical and aesthetics clinic operations. Permitted uses include: patient communication, appointment management, quote generation, follow-up automation, and clinic analytics.

2. General Prohibitions

• Sending unsolicited messages (spam) to individuals who have not inquired with your clinic
• Processing personal data without a lawful basis
• Harassing, threatening, or intimidating patients or staff
• Storing or transmitting content that is illegal, defamatory, or obscene
• Attempting to access data belonging to other clinics
• Using the Service for any unlicensed medical practice
• Sharing patient data with unauthorised third parties
• Using automated messaging to mislead patients about pricing or procedures

3. UK-Specific Requirements

• Compliance with UK GDPR and Data Protection Act 2018
• Compliance with Privacy and Electronic Communications Regulations (PECR)
• Advertising Standards Authority (ASA) rules for medical advertising
• Care Quality Commission (CQC) standards where applicable

4. Consequences of Violation

Violations may result in: warning notice, temporary suspension, permanent termination without refund, and reporting to relevant authorities where required by law.

5. Reporting Violations

Report violations to support@medflowai.io. We investigate all reports within 48 hours.