Not everyone who glances at a screen needs to see a patient's name. Patient Privacy decides how much of the name the browser shows, what's stripped from invoices after a patient is deleted, and whether invoice emails go out, location by location.

Settings are per location

Open Settings, then Patient Privacy. The page shows the settings for one location, named at the top with who last changed them and when. An administrator in a clinic with more than one location can switch location there and set each one differently, for example stricter at a site with a public waiting area. Save after changing; the confirmation names the location you saved.

Switch anonymization on before anyone is deleted. The Invoices and payments switch is checked at the moment a patient is deleted. Someone deleted while it was off keeps their name on those invoices, and switching it on later doesn't go back and change them.
The Patients Privacy page for Riverside Physiotherapy, showing Browser page title set to Initials, the Invoices and payments and Booking notifications anonymization switches on, and Email invoices and receipts on.
Privacy settings for the Riverside location, with the browser title set to Initials and both anonymization switches on.

Patient name display

Browser page title decides what the browser shows as the page name while a patient's record is open, which is what anyone glancing at the screen, the taskbar or an open window list can read. Choose First name, Full name, Initials or Anonymous. This only changes the title; the record itself is unchanged. The browser's own history still keeps past titles, so on a shared computer this is one layer of privacy, not a guarantee.

Patient anonymization

Deleting a patient removes their record, but invoices and payments have to stay for the accounts, and some notifications have already gone out. Two switches limit what identifies the patient in those places:

  • Invoices and payments: after a patient is deleted, their identifying details are removed from their invoices, payments and the notes attached to them. The amounts and dates stay, so totals and reports still add up.
  • Booking notifications: the notifications staff receive about bookings, cancellations and practitioner schedules use anonymized patient details instead of names.

Both are off in a new clinic. Deleting a patient is covered in Archive, restore or delete a patient.

Patient financial data

Email invoices and receipts is on by default. Switch it off for a location where patients shouldn't receive invoice and payment receipt emails from ClinyPal at all, for example where a third party bills, or where the clinic prints and hands over every invoice. Invoices can still be sent by hand from the invoice itself.