Medloop Coder

Privacy Policy

Last updated: 14 September 2026

This notice explains how Medloop Coder uses information when you sign in with NHS login and register with this service. It should be read alongside Medloop’s organisation Privacy Policy, which covers our wider services.

Who provides this service?

Medloop Ltd is a UK company, registration number 11380035. For questions about your information or to exercise your data protection rights, contact our Data Protection Officer at DPO@medloop.co or write to Medloop Ltd, 9 Mandeville Place, Marylebone, London W1U 3AY.

NHS login and your information

Please note that if you access our service using your NHS login details, the identity verification services are managed by NHS England. NHS England is the controller for any personal information you provided to NHS England to get an NHS login account and verify your identity, and uses that personal information solely for that single purpose. For this personal information, our role is a “processor” only and we must act under the instructions provided by NHS England (as the “controller”) when verifying your identity. To see NHS login’s Privacy Notice and Terms and Conditions, please click here. This restriction does not apply to the personal information you provide to us separately.

You can access Medloop Coder using your NHS login details.

If you sign in using NHS login, we will ask your permission to share your NHS login information with our service. This allows us to fill in some personal details for you, such as your name, date of birth and contact details.

We will not use your NHS login information for any other purposes. You can only share your NHS login information if you have proved your identity to NHS login.

For more information, see the NHS login Privacy Policy and Terms & Conditions.

What this service receives and uses

Depending on what NHS login shares, we receive your NHS login identifier, name, date of birth, email address, telephone number, NHS number, GP practice code and identity verification information. We use these to recognise you, support registration and show the details shared with this service. Your NHS number is shown only when NHS login confirms the required identity assurance level.

Your NHS password and the documents you use to prove your identity are not collected by this site. NHS login manages those steps. If you decline to share the required NHS login information, you cannot register through this flow.

Your registration and cookies

This NHS Assurance test service remembers registration in your browser. It does not currently keep a separate account database. It uses essential, encrypted cookies:

• A sign-in cookie lasts up to 10 minutes and protects the NHS login return journey.
• A session cookie keeps the NHS login details used by this service for up to 30 minutes.
• A registration cookie remembers your account identifier, NHS login identifier, registration date and the version and time of your accepted agreements for up to 30 days.

Signing out clears the session but preserves registration in that browser. Clearing this site’s cookies removes that browser’s registration. This does not delete your NHS login account, revoke NHS login permissions or delete information already shared with another service.

Sharing and sample records

If you arrived from an approved partner service, the dashboard names it and offers a separate choice to share your displayed NHS login details with it. Details are sent only when you choose that sharing action. The recipient’s own privacy notice applies to its use of the information.

The sample patient record on the dashboard is fictional test data. NHS login does not supply medications or allergies, and this version does not retrieve a patient’s clinical record or connect to a GP clinical system.

Service operation and your rights

The website’s hosting infrastructure processes connection and request information to deliver the service. The cookie lifetimes above describe browser storage, not a retention promise for infrastructure logs or records held by NHS England or another service.

Medloop’s organisation privacy policy explains its wider processing, retention arrangements, overseas transfers and your rights. You can contact the DPO to request access, correction or deletion of your data, raise an objection, or ask about restriction, portability and withdrawal of consent where these rights apply. You can also complain to the Information Commissioner’s Office.

You can manage NHS login sharing permissions in NHS login settings. Choices about NHS login are separate from the Medloop registration agreements and any later partner sharing.

Changes to this notice

The date above identifies this notice. When the registration agreements change, this service asks you to review and accept the updated agreements before continuing.