Contracts and Policies

IndieBase operates under clear legal agreements to protect both users and the platform.

Key Documents

Terms of Service

• User rights and responsibilities
• Platform usage terms
• Service availability
• Liability limitations

Privacy Policy

• Data collection practices
• Data usage and storage
• User rights under GDPR
• International data transfers

Data Processing Agreement

• How patient data is processed
• Security measures
• Data retention
• Regulatory compliance

Terms of Use

• Acceptable use policies
• Prohibited activities
• Account termination conditions
• Intellectual property

Team Attestations

Team administrators must accept:

• Terms of Service
• Terms of Use
• PID (Personal Identifiable Data) policy
• Data processing agreements

Periodic re-attestation may be required for updated terms.

Compliance

IndieBase complies with:

• GDPR - EU data protection
• UK Data Protection Act
• NHS Information Governance
• Medical device regulations (where applicable)
• Professional standards (GMC, HCPC, etc.)

Accessing Policies

• Available at indiebase.net/legal
• Accessible from application footer
• Updated versions notified to users
• Historical versions maintained

Related: Data Security