GoDocta Data Retention & Data Deletion Policy

Last updated: Monday, October 20, 2025

1. Purpose

This Data Retention & Data Deletion Policy explains how GoDocta Health Corp and Urgent Care SKN retain, archive, and delete personal data collected through the GoDocta Patient Mobile Application, website, telehealth services, and in-clinic operations.

This policy supports our Privacy Policy and satisfies the requirements of the Google Play Store, Apple App Store, GDPR/UK GDPR, and applicable Caribbean healthcare regulations.

2. Scope

This policy applies to:

• Users of the GoDocta Patient Mobile Application
• Patients receiving in-clinic or virtual care
• Website and digital platform users
• Communications conducted via WhatsApp, email, or phone

3. Categories of Data Retained

We may retain the following data categories:

• Identity & Account Data (name, contact details, date of birth)
• Medical & Health Records (consultation notes, diagnoses, prescriptions, lab results)
• Communications Data (messages, emails, chat logs)
• Technical & Usage Data (IP address, device identifiers, app activity)
• Billing & Financial Records
• Security, audit, and compliance logs

4. Retention Periods

Retention periods may be extended where required for:

• Legal claims
• Regulatory audits
• Public health reporting

5. User-Initiated Data Deletion [Play Store Mandatory]

Users may request deletion of their personal data at any time, subject to applicable healthcare and legal obligations.

How to Request Deletion

Requests can be made by:

• Emailing privacy@godocta.com with subject line
  “Data Deletion Request – GoDocta App”
• Using the in-app account deletion function (where available)

Identity verification may be required.

6. Processing of Deletion Requests

Upon receipt of a valid request:

• Non-essential personal data will be permanently deleted or anonymized
• Medical records required by law will be securely archived and access-restricted
• Data deletion requests are processed within 30 days, unless extended by law

Deleted data cannot be recovered.

7. Automatic Deletion & Anonymization

We periodically:

• Remove inactive accounts after applicable retention periods
• Anonymize data used for analytics, audit, and quality improvement
• Securely dispose of backups in line with system lifecycle controls

8. Security of Deletion

Data deletion is performed using industry-standard safeguards, including:

• Encrypted storage disposal
• Role-restricted deletion permissions
• Audit logging of deletion activity

9. Contact Information

For questions regarding data retention or deletion:

Data Protection Contact
GoDocta Health Corp
Email: privacy@godocta.com