← SEVENTY3®

Seventy3 OS — Acceptable Use Policy

Seventy3 Group Ltd Effective date: 13 July 2026 · Last updated: 13 July 2026 · Version 1.0

This Acceptable Use Policy ("AUP") forms part of the Agreement between Seventy3 Group Ltd ("Seventy3", "we", "us") and the customer ("you", "the Clinic"). Capitalised terms have the meanings given in the Terms of Service. A material breach of this AUP is a material breach of the Terms of Service (clause 8) and may result in suspension or termination under clause 6.2.

This AUP exists to keep the Platform safe, lawful, and available for every clinic and every patient. If you are unsure whether something is permitted, ask us first at hamayoon@seventy3.co.

1. General obligations

You, and every Authorised User, must:

  • use the Platform only for its intended purpose — the lawful operation of a UK therapy or performance clinic;
  • comply with all applicable laws, regulations, and professional standards (including those of your regulator, e.g., HCPC, GOsC, GMC);
  • keep account credentials secure, use multi-factor authentication where offered, and not share logins;
  • ensure that only appropriately authorised individuals access Patient data through your account;
  • promptly report any security concern, suspected breach, or misuse to us.

2. Prohibited use — the Platform generally

You must not, and must not permit any Authorised User or third party to:

  • use the Platform in breach of any law, regulation, or third-party right;
  • upload, store, or transmit any content that is unlawful, defamatory, obscene, harassing, or that infringes intellectual property or privacy rights;
  • upload or transmit malware, or any code intended to disrupt, damage, or gain unauthorised access to any system or data;
  • probe, scan, penetration-test, or attempt to circumvent any security or access control of the Platform without our prior written consent;
  • access or attempt to access any data, account, or clinic that is not yours;
  • reverse engineer, decompile, scrape, or attempt to derive the source code, models, or algorithms of the Platform (see also Terms of Service clause 10.3);
  • use the Platform to build, train, or benchmark any competing product or service;
  • resell, sublicense, or provide the Platform to any third party except your own Authorised Users;
  • impose an unreasonable or disproportionate load on the Platform or its sub-processors, or use the Platform in a way that risks the availability or integrity of the service for other clinics;
  • remove, obscure, or alter any proprietary notice on the Platform.

3. Prohibited use — communications (voice, SMS, email)

Because the Platform sends communications on your behalf via Twilio, Resend, and the Retell AI voice receptionist, you must not use it to:

  • send unsolicited marketing (spam) or any communication in breach of the Privacy and Electronic Communications Regulations (PECR) or UK GDPR;
  • send communications to any person who has withdrawn consent or opted out;
  • send content that is fraudulent, misleading, threatening, or unlawful;
  • spoof, forge, or misrepresent the origin of any communication;
  • use the voice or SMS functions for any automated dialling or messaging campaign that breaches Ofcom rules or the rules of the relevant carrier.

You are responsible for ensuring you have a lawful basis and any required consent for every communication you instruct the Platform to send.

4. AI-specific rules (mandatory)

The Platform includes AI-assisted features (voice receptionist, transcription, clinical documentation, exercise and treatment suggestions). When using these features you must:

  1. Tell patients that AI is in use. You must inform patients, in a clear and accessible way, that an AI system may handle their call, transcribe their communications, or assist in preparing clinical documentation. The Retell AI voice receptionist is configured to support disclosure of its AI nature at the start of a call; you must not disable or undermine that disclosure.
  2. Keep a human in the loop. You must not treat any AI-generated output as a clinical decision. Every AI output is a draft that a registered clinician must independently review, validate, and expressly confirm before it is acted upon, communicated to a patient, or entered into a clinical record (Terms of Service clause 3.3).
  3. Not rely on AI as a sole clinical basis. You must not use, and must not represent to any patient that you use, AI output as a diagnosis, prescription, or substitute for professional clinical judgement.
  4. Not attempt to make the Platform function as a medical device. You must not configure or use the AI features in a way that would cause the Platform to perform diagnosis, treatment recommendation for a specific patient, or any other regulated medical-device function (Terms of Service clause 3.3.2).
  5. Not input unlawful, discriminatory, or harmful prompts, and not attempt to manipulate the AI to bypass its safety behaviour or produce prohibited content.
  6. Respect data minimisation. Only enter the personal and special-category data actually needed for the patient's care; do not enter another individual's data without a lawful basis.

5. Data protection obligations

As data controller for Patient data, you must:

  • have and maintain a lawful basis under UK GDPR Articles 6 and 9 for all Patient data you process through the Platform;
  • provide patients with all required privacy information, including that Seventy3 and its sub-processors process their data on your behalf (a template privacy notice is available on request);
  • honour data subject rights and respond to complaints and regulator enquiries in your capacity as controller, with assistance from us as set out in the DPA;
  • not instruct us to process Patient data in any way that would breach Data Protection Laws.

6. Consequences of breach

If you or an Authorised User breach this AUP, we may (in addition to our rights under the Terms of Service):

  • issue a warning and require you to remedy the breach;
  • suspend the affected function or your access immediately where we reasonably consider the breach poses a risk to the Platform, to other clinics, to patients, or to Seventy3's legal or regulatory standing (Terms of Service clause 6.2);
  • terminate the Agreement for material breach;
  • report the matter to a regulator or law-enforcement body where we are legally required to do so.

Where practicable and lawful, we will give you notice and an opportunity to remedy before suspending; but for serious breaches (including anything endangering patient safety, data security, or third-party rights) we may act immediately.

7. Changes to this AUP

We may update this AUP from time to time in line with clause 17 of the Terms of Service. For material changes we will give at least 30 days' notice.

8. Contact

Questions about this AUP: hamayoon@seventy3.co · Seventy3 Group Ltd, Suite 21, Call House, Enfield Street, Leeds, England, LS7 1RF.