BetterDesk
BetterDesk / Security and POPIA Safe with your information

Patient information, protected by design

Health information is special personal information under POPIA. BetterDesk is built so that each person sees only what their work needs, every change is recorded, and nothing clinical is ever lost.

Who sees what

Enforced by the database

Each practice or gym sees only its own information, and each role only what it allows. The database itself checks every request, not just the screens.

Roles for every staff member

Owners, practitioners, reception and instructors each have their own login. The owner decides who sees which parts.

Patients and members

Members see only their own bookings and details. Patients fill in their forms through a private link sent only to them.

Recorded, kept and backed up

Everything logged

Every change, and every time a patient’s file is opened, is recorded with who and when.

Never deleted

Treatment records are never deleted: patients are archived, appointments cancelled and records reopened, so the history stays complete.

Encrypted and backed up

Information is encrypted on the way and where it is stored, and backed up every day. BetterDesk is hosted in London, United Kingdom.

Signing in

Two-step sign-in

Owners sign in with a code from an authenticator app on their phone as well as their password.

Locked after wrong passwords

Repeated wrong passwords lock the login for a while, and passwords known from data leaks are refused.

“Was this you?”

A sign-in from a new device sends an email, and BetterDesk is alerted to anything unusual.

POPIA in daily work

The practice stays responsible

Each practice or gym is the responsible party for its clients’ information. BetterDesk processes it only on their behalf, under the terms of service.

Consent and the privacy notice

Patients agree to messages on their form, and the practice’s privacy notice is recorded with the date it was given.

Access requests

The owner downloads everything held about a patient as one Excel workbook, printable on A4, and the download is logged.

Only what is needed

Emails and notifications carry no health information. A referral goes only with the patient’s permission, recorded on the referral.

Questions about your information, or a request to delete it: see the privacy policy and deleting your data.

Questions about security?

Ask us about hosting, backups or POPIA before you start.