Terms of Service

1. Agreement to terms

By creating an account, submitting a form, or using any Digital Health Identity service, you agree to these Terms of Service and our Privacy Policy. If you do not agree, do not use the platform. Organisations enrolling clinicians or staff must ensure authorised signatories accept organisational terms before production access is enabled.

We may update these terms to reflect regulatory changes, new product capabilities, or security requirements. Material revisions will be announced through the patient dashboard, provider portal, or email at least thirty days before they take effect unless immediate changes are required for legal compliance or threat mitigation.

2. Description of services

Digital Health Identity provides verified patient profile management, consent-aware record sharing, practitioner credential verification, appointment identity matching, and related healthcare informatics tools. The platform facilitates connections between patients and participating care organisations but does not itself deliver medical diagnosis, treatment, or emergency response.

Services are offered on an infrastructure basis. Clinical decisions remain the sole responsibility of licensed healthcare professionals and their employing institutions. Identity verification reduces certain administrative risks but cannot guarantee that every external record is complete or current.

3. Eligibility and account registration

Individual patients must be at least sixteen years old to create independent accounts unless applicable regulations permit earlier enrollment with guardian oversight. Guardians may establish managed profiles for minors and individuals lacking legal capacity when documentation supports their authority.

You agree to provide accurate demographic information, maintain current contact channels, and notify us promptly of unauthorised access. Impersonation, submission of falsified credentials, or deliberate creation of duplicate identities violates these terms and may be reported to relevant medical boards or law enforcement.

4. Patient responsibilities

Patients are responsible for reviewing consent grants, revoking outdated permissions, and confirming that linked clinics reflect their actual care history. You should verify allergy and medication summaries after major encounters because downstream systems may introduce delays before updates propagate network-wide.

Sharing login credentials with unauthorised persons is prohibited. Delegated access features exist precisely to give caregivers limited visibility under audit controls rather than informal password sharing that bypasses logging requirements.

5. Healthcare organisation responsibilities

Clinics, hospitals, laboratories, and allied providers integrating with Digital Health Identity must implement staff training, role-based access controls, and incident reporting consistent with partner agreements. Organisations warrant that users accessing patient profiles have legitimate treatment, payment, or healthcare operations purposes.

Break-glass access during emergencies is permitted only where regulations allow and must be documented with retrospective review. Repeated inappropriate break-glass usage may trigger suspension pending investigation.

6. Acceptable use

You may not use the platform to harass individuals, mine data for unrelated marketing, reverse engineer security controls, or interfere with service availability. Automated scraping of provider directories beyond published APIs is forbidden.

Research utilising de-identified datasets requires explicit approval under research addenda. Attempting to re-identify individuals from aggregated statistics violates both these terms and research ethics expectations.

7. Fees and payment

Individual membership fees are described on the pricing page and billed according to the plan selected. Organisation pricing follows executed order forms specifying lookup volumes, integration modules, and support tiers. Late payments may result in read-only access until balances are settled.

Except where mandatory consumer laws provide otherwise, fees are non-refundable once a billing period begins. Downgrades take effect at the next renewal cycle unless otherwise stated in writing.

8. Intellectual property

Digital Health Identity retains ownership of software, documentation, trademarks, and visual designs associated with the service. Patients retain ownership of personal health information subject to licenses granted through consent settings to authorised providers.

Feedback submitted about product improvements may be incorporated without obligation or compensation unless a separate innovation agreement exists.

9. Confidentiality and security

We implement administrative, technical, and physical safeguards aligned with healthcare privacy standards. No system is impervious to breach; you acknowledge inherent risks of electronic storage and agree to cooperate with notified containment steps if incidents affect your account.

Organisation administrators must configure multi-factor authentication, rotate API keys periodically, and restrict integration endpoints to trusted networks where feasible.

10. Third-party services

Participating clinics, laboratories, wearable vendors, and payment processors operate under their own policies when you interact directly with them. Digital Health Identity facilitates identity linkages but is not responsible for clinical acts, laboratory methodology, or hardware malfunctions outside our control.

Links to external educational resources do not constitute endorsements. Verify critical medical guidance with qualified professionals.

11. Disclaimers

Services are provided on an as-available basis without warranties of uninterrupted operation, error-free matching, or fitness for a particular clinical purpose beyond stated identity verification goals. We disclaim implied warranties to the fullest extent permitted by applicable law.

Identity confidence scores and duplicate suggestions assist human review; they are not deterministic judgments. Final merge or split decisions remain with credentialed health information stewards.

12. Limitation of liability

To the extent allowed by law, Digital Health Identity and its directors, employees, and suppliers are not liable for indirect, incidental, special, or consequential damages arising from platform use, including lost profits, care delays attributable to third parties, or reputational harm.

Aggregate liability for direct damages shall not exceed the fees you paid during the twelve months preceding the claim, or one hundred monetary units if no fees applied, whichever is greater, except where liability cannot be limited for personal injury caused by proven gross negligence.

13. Indemnification

Organisations agree to indemnify Digital Health Identity against claims arising from their staff misuse, regulatory non-compliance, or unauthorised data disclosures originating within their environments. Patients agree to indemnify against claims arising from fraudulent information they supply or intentional consent violations affecting third parties.

14. Suspension and termination

We may suspend or terminate access for terms violations, non-payment, credible fraud investigations, or extended inactivity on unpaid tiers. Patients may close accounts through dashboard tools; organisational offboarding follows written notice periods in enterprise contracts.

Upon termination, export tools remain available for a defined window so you can retrieve consents and audit logs. Legal retention requirements may prevent immediate deletion of certain records.

15. Dispute resolution

Parties should first attempt good-faith resolution through designated support channels. If unresolved, disputes proceed to binding arbitration or courts specified in organisational agreements, respecting mandatory healthcare consumer protections that cannot be waived.

16. Governing principles

These terms interpret according to applicable healthcare privacy and consumer protection frameworks without reference to conflict-of-law rules that would displace mandatory patient rights. Undefined capitalised terms carry meanings assigned in partner agreements or regulatory glossaries.

17. Severability

If any provision of these terms is held invalid or unenforceable, remaining provisions continue in full force. Invalid clauses will be interpreted to reflect the parties' original intent as closely as permitted.

18. Entire agreement

These terms, together with the Privacy Policy, pricing descriptions, and executed organisation order forms, constitute the entire agreement regarding platform use unless superseded by signed enterprise contracts with conflicting provisions explicitly noted.

19. Assignment

Patients may not assign account rights without our consent. Organisations may assign agreements to successors in corporate transactions provided successors assume equivalent privacy obligations and notify affected patients when control changes materially.

20. Contact

Questions about these terms may be submitted through the contact form on this website. Organisations should reference their account identifier to expedite routing to legal operations.