Atlacare keeps two separate consent records for every patient. They answer different questions, and one never stands in for the other.
- Treatment consent: has the patient agreed to you storing and using their health information to provide their care?
- Marketing consent: has the patient opted in to updates and offers from your clinic?
Consent recording works on every plan.
Treatment consent
When you add or edit a patient, Atlacare asks Has (patient) given GDPR consent? You must choose one:
- Yes - consent given
- No - not yet obtained
There's no default, so the answer is always a deliberate choice. The patient's profile then shows Consent recorded or Pending.
How other routes record it:
- Registration link: patients who register with your registration link agree to your clinic storing their details as part of the form, so consent is recorded as given.
- Imported patients: patients brought in with the import wizard are recorded as given offline, because you collected their consent before the move.
- Online booking: patients who book on your booking page show as Pending until you record their answer. Booking relies on providing their care, not on consent, so Atlacare doesn't record a consent they didn't give.
To find everyone still pending, choose Consent pending in the consent filter on the Patients list.
Video consultations
The first time a patient joins a video consultation, they're asked to consent to the call. The date appears on their profile as Video consent: Given (date).
Marketing consent
Marketing consent is off for every patient until they opt in themselves. Patients opt in by ticking the optional, unticked box on your registration link. Nobody is opted in by default or by import.
Only patients with marketing consent receive campaigns. Atlacare enforces this for you. Appointment confirmations and reminders aren't marketing, so they go to every patient regardless (see transactional vs marketing messages).
Withdrawing marketing consent
Every campaign email has an unsubscribe link, and marketing texts carry an opt-out link. When a patient uses either, their marketing consent is removed straight away and they get no more campaigns.
To see who has opted in, use the Marketing consent filter (Given or Not given) on the Patients list.
See the totals
Settings → GDPR & consent (owners and managers) shows:
- Treatment consent: how many patients are Given (digital), Given (offline / imported), Given (method not recorded), Declined or Not recorded yet.
- Marketing consent: Given and Not given.
- Your agreement with Atlacare: the versions of our terms, data processing agreement and privacy policy you accepted, and when.
- Recent data exports: who exported patient data, and when.
- Your data retention periods and supervisory authority.