Data Retention Policy
Last updated: 12 May 2026
We retain data only as long as needed for the purpose it was collected and to meet legal and professional obligations.
Retention windows
- Outpatient records: typically retained for at least 3 years.
- Indoor / hospitalisation records: longer retention may apply.
- Medico-legal records: may require extended retention under applicable law.
Deletion requests
Patients and clinics may request deletion of records. Such requests may be limited where records must legally be retained, for example to meet medical record-keeping or regulatory obligations.
Backups
Deleted data may continue to exist temporarily in encrypted backups before those backups age out in the normal course.
Account closure
If a clinic closes its account, identifying account data is removed in due course, and clinical records continue to be retained encrypted for the applicable retention window.