Retention and deletion
← Back to trust centreHow to explain data retention expectations, exports, operational records, and deletion handling in a clear and realistic way.
What clinics should know
Patient and operational data should follow documented retention rules that reflect legal, operational, and business needs.
Exports and audit history should be treated as part of the clinic’s operational record rather than disposable copies.
Deletion workflows should be reviewed carefully where medical, operational, or contractual obligations apply.
Not every deletion request should be treated as an immediate hard delete without review.
What to document next
How long different record categories are expected to be kept
How export files are handled and how long they remain accessible
Whether backups, logs, or audit records have different retention windows from live application data
Who approves deletion or anonymisation decisions when records relate to active clinic operations