Last updated: February 2026
M Clinic is operated by Citizen Peace Limited, a company registered in England and Wales. We provide AI-powered telephone receptionist services for GP clinics in the United Kingdom.
When patients call a clinic using our service, the following data is processed in real-time:
Patient name, phone number, date of birth, and appointment details (date, time). This data is processed solely for the purpose of managing appointments.
We do not store patient data on our own servers. All appointment data is stored directly in the clinic's own Google Cloud (Firebase) account. The clinic is the data controller; M Clinic acts as a data processor on behalf of the clinic.
Voice calls are processed in real-time through OpenAI's API. We do not record or store call audio.
Our service uses the following third-party providers:
OpenAI (ChatGPT API) — Real-time voice conversation processing. Subject to OpenAI's data usage policies.
Vonage — UK telephone number provision and VoIP services.
Google Cloud (Firebase) — Appointment data storage in the clinic's own account.
Google Calendar API — Appointment synchronisation with the clinic's Google Calendar.
If enabled by the clinic, SMS confirmations are sent to patients via Vonage. Phone numbers are used solely for appointment-related communications and are not shared with third parties for marketing purposes.
Appointment data is retained in the clinic's Google Cloud account. Clinics may request deletion of their data at any time. System logs on our servers are automatically purged and do not contain patient-identifiable information.
Under UK data protection law, patients have the right to access, correct, or request deletion of their personal data. These requests should be directed to the GP clinic, as they are the data controller. Clinics may contact us to facilitate data deletion.
For privacy-related enquiries: barisyurttas@mclinic.barisy.org
Citizen Peace Limited, United Kingdom