Terms and Conditions

Last updated: 28 June 2026

These Terms govern your use of the Get Patient Consent platform (the "Platform") provided by Get Patient Consent ("we", "us", "our"), the trading name of CSSL Ltd a company registered in England and Wales with company number 03996773. Our registered office is at Sharpe Medical Accounting Ltd, Normanby Gateway, Lysaghts Way, Scunthorpe, South Humberside, England, DN15 9YG.

By creating an account or using the Platform, you agree to these Terms. If you do not agree, do not use the Platform.

Important — please read the Clinical Disclaimer below. The Platform is a tool to help clinical teams carry out and document the consent process. It does not provide medical advice and is not a substitute for your professional judgement. The final responsibility for the consent process rests with the treating clinician and the patient: it is the clinician's responsibility to ensure the patient is appropriately informed and validly consented, and the patient's decision whether to give consent. We do not carry out, supervise, or take responsibility for the consent process itself.

1. Who can use the Platform

The Platform is intended for use by registered healthcare professionals practising in the United Kingdom, by administrative staff invited by those professionals, and by patients those professionals invite to give consent.

Clinician accounts. By creating a clinician account you confirm that:

• You are a healthcare professional registered with an appropriate UK regulator (GMC, GDC, NMC, HCPC, or equivalent), or you are using the Platform under the direct supervision of one
• You are authorised to obtain consent for the procedures you use the Platform to document
• The information you provide about yourself is accurate and kept up to date
• You will comply with your regulator's guidance on consent (e.g. the GMC's Decision making and consent)

Staff accounts. Clinicians may invite named administrative staff (secretaries, PAs, practice managers, and similar) to access the Platform on their behalf. By accepting an invitation and creating or using a staff account you confirm that:

• You have been invited by a named clinician account holder and are acting at their direction
• You will use the Platform only for the administrative purposes the clinician has authorised
• You will not share your login credentials with anyone else
• You will comply with the acceptable use obligations in section 4

2. The service and changes to it

We provide the Platform as an ongoing subscription service. From time to time we may add, change, or improve features, and we may occasionally retire features that are no longer supported. We will give reasonable notice of any change that materially affects how you use the Platform. We may invite feedback and use it, in anonymised form, to improve the Platform.

3. Accounts and access

You are responsible for:

• Keeping your sign-in credentials and access tokens secret
• All activity that takes place under your account
• Notifying us immediately at security@getpatientconsent.com if you suspect unauthorised access

We may suspend or terminate your account if we reasonably believe it is being used in breach of these Terms or in a way that risks harm to patients, to other users, or to us.

3A. Delegate access — inviting administrative staff

Clinician account holders may grant named individuals access to act on their behalf ("delegate access"). This section explains the responsibilities that arise when you use this feature.

The clinician granting access is responsible for:

• Inviting only people whose access to patient data is appropriate and proportionate
• Revoking access promptly when it is no longer needed (e.g. when an employment relationship ends, or holiday cover concludes)
• Ensuring invited staff understand and comply with these Terms
• All actions taken by staff using the Platform on their behalf, including the accuracy of any information entered, any consent sent to a patient, and any patient record created or amended

The clinical responsibility for consent remains entirely with the clinician. Administrative staff may prepare draft consents, set procedure dates, and send consent links, but the treating clinician is and remains the clinician who is responsible under their professional registration and indemnity for the consent process and its documentation. Granting delegate access does not transfer that responsibility.

Every action taken by a staff member is recorded. The Platform's audit trail logs the identity of the staff member who performed each action, the time it was performed, and the clinician on whose behalf they were acting. This record is permanent and cannot be altered.

Staff accounts are personal. Each invited individual must have their own account. Staff may not share credentials or allow others to act using their login.

Staff are bound by these Terms. By accepting an invitation, staff account holders agree to these Terms in their own right, including the acceptable use obligations in section 4 and the data protection obligations in section 5.

4. Acceptable use

You agree not to:

• Use the Platform to obtain consent for procedures you are not qualified or authorised to perform
• Upload content that is unlawful, defamatory, infringing, or harmful
• Attempt to circumvent security, access another user's data, or reverse-engineer the Platform
• Use the Platform to send unsolicited marketing to patients
• Resell or sublicence access without our written agreement

5. Patient data and data protection

When you use the Platform to obtain consent from patients, you (or your organisation) are the data controller for that patient data and we are the data processor. Our processing is governed by these Terms, our Privacy Policy, and any Data Processing Agreement we enter into with you.

You are responsible for:

• Having a lawful basis to share patient data with us
• Providing patients with appropriate privacy information about your use of the Platform
• Ensuring the consent template content you produce is accurate, current, and appropriate for the procedure
• Responding to patient data subject rights requests

We are responsible for handling the data securely as set out in our Privacy Policy and processing it only on your documented instructions.

6. Clinical Disclaimer

The Platform is a documentation and communication tool. It is not a medical device, it does not make clinical decisions, and it does not provide medical advice.

• Consent templates, default risk lists, and example wording supplied by the Platform are starting points only. You must review, customise, and verify all clinical content before sending it to a patient.
• The Platform does not assess whether a patient has capacity, whether they understand what they are consenting to, or whether the proposed procedure is appropriate. Those judgments remain yours.
• Audit trails, time-on-page metrics, and comprehension checkpoints are evidence, not proof, of understanding. They do not substitute for the dialogue the law requires (see Montgomery v Lanarkshire Health Board [2015] UKSC 11).
• The Platform may be unavailable due to maintenance, outages, or events outside our control. You must have a fallback process (e.g. paper consent) and not rely on the Platform exclusively for time-critical consent.
• Any reference to legal standards (such as Montgomery) is general information, not legal advice. If you are uncertain about your duties, consult your defence organisation or solicitor.

Final responsibility for consent rests with the clinician and the patient — not with us. The Platform exists only to help clinical teams carry out and record the consent conversation. You acknowledge that:

• It is the treating clinician's responsibility (and, where applicable, that of their organisation) to ensure each patient is appropriately informed and that valid, informed consent is obtained, in line with their professional and legal duties.
• The decision whether to give or refuse consent is the patient's.
• We do not carry out, supervise, verify, or take responsibility for the consent process, the adequacy of the information given to any patient, or any clinical decision made by you or your colleagues. We accept no liability for these matters.

7. Intellectual property

• The Platform itself, including the software, design, brand, and our default content templates, is owned by CSSL Ltd (trading as Get Patient Consent) and protected by copyright and other rights.
• We grant you a non-exclusive, non-transferable, revocable licence to use the Platform during your subscription / access period, for the purposes described in these Terms.
• Content you create in the Platform (your consent templates, custom risk wording, leaflets you upload, signed consent records) remains yours or your organisation's. You grant us a limited licence to store, process, and display that content as required to provide the service.
• You may export your data on request, and on termination, in a structured, machine-readable format.

8. Pricing, payment and refunds

Pricing. Current plans and prices are published on our pricing page. Subscription fees are billed in advance — monthly or annually, depending on the plan you choose — and are stated exclusive of VAT unless noted otherwise. Institutional and high-volume pricing is agreed separately. We will give you reasonable advance notice of any change to the fees for your plan, and you may choose whether to continue before the change takes effect.

Payment processing (Stripe). Card payments and subscription billing are handled on our behalf by Stripe Payments Europe, Ltd. ("Stripe"), a third-party payment processor. When you subscribe, change plan, or update your payment details, you will be directed to Stripe's secure checkout and billing portal to enter and manage your payment information. Your use of Stripe is subject to Stripe's own terms, including the Stripe Services Agreement and Stripe Privacy Policy. By subscribing, you authorise Stripe to charge your chosen payment method for the recurring fees of your plan, on each renewal, until the subscription is cancelled.

We do not receive or store your full card details. Stripe collects and processes your card information directly. We receive only limited billing information from Stripe (such as the card brand, last four digits, expiry date, billing name, and the success or failure of each payment) in order to manage your subscription. You are responsible for keeping your payment details current. If a payment fails, we (via Stripe) may re-attempt it, and we may suspend access to the Platform until your account is brought up to date.

No refunds. Subscription fees are non-refundable. Your fees cover the upfront costs of provisioning your account, onboarding, and making the Platform and its supporting infrastructure available to you for the period — costs we incur at the start of each period regardless of how much you go on to use the service. Accordingly, you pay in advance for your billing period (monthly or annually), and we do not provide refunds, credits, or pro-rata adjustments for cancellations, downgrades, unused time, or periods during which you do not use the Platform — whether you cancel part-way through a period or simply stop using it. If you cancel, your subscription remains active until the end of the period you have already paid for and then will not renew. This does not affect any rights you have that cannot lawfully be excluded, including any statutory rights that apply to you and your right to a remedy where we have failed to provide the Platform as described in these Terms. We may, at our sole discretion and without setting any precedent, choose to offer a credit or refund in an individual case; doing so on one occasion does not oblige us to do so again.

9. Availability and changes

We aim for high availability but do not warrant that the Platform will be uninterrupted or error-free. We may carry out maintenance, occasionally with little notice for urgent security work. We may also modify, suspend, or discontinue features.

10. Liability

Nothing in these Terms limits or excludes our liability for:

• Death or personal injury caused by our negligence
• Fraud or fraudulent misrepresentation
• Any other liability that cannot lawfully be excluded

Subject to the above, to the maximum extent permitted by law:

• We are not liable for indirect or consequential loss, loss of profits, loss of business, loss of goodwill, or loss arising from clinical decisions made by you or your colleagues.
• Our total aggregate liability under or in connection with these Terms is limited to the greater of (a) the fees paid by you in the 12 months preceding the claim, or (b) £1,000 per 12-month period.

You agree to keep appropriate professional indemnity insurance covering your use of the Platform.

11. Termination

You may close your account at any time by contacting us. We may suspend or terminate your account if:

• You materially breach these Terms and do not remedy the breach within 14 days of being asked
• You use the Platform in a way that risks harm to patients or to others
• You become insolvent or otherwise unable to continue

On termination we will, on request and within a reasonable period, provide you with an export of your data and then delete it from active systems (subject to legal retention obligations and backup cycles described in our Privacy Policy).

12. Changes to these Terms

We may update these Terms. Material changes will be notified by email to account holders, with at least 30 days' notice where reasonably possible. Continued use of the Platform after the effective date constitutes acceptance.

13. Governing law

These Terms are governed by the laws of England and Wales. Disputes will be subject to the exclusive jurisdiction of the courts of England and Wales, except that we may bring proceedings to protect our intellectual property in any jurisdiction.

14. Contact

• General enquiries: hello@getpatientconsent.com
• Privacy and Security matters: privacy@getpatientconsent.com
• Post: Sharpe Medical Accounting Ltd, Normanby Gateway, Lysaghts Way, Scunthorpe, South Humberside, England, DN15 9YG