Data retention
How long each category of data is kept, and why.
This translation is provided for information. Where it differs from the French version, the French version prevails.
This document is being finalised: some of the publisher’s legal details have still to be filled in.
1.Principle
Data is kept for as long as its purpose requires, then deleted or anonymised. For patients’ data, it is the clinic, as controller, that sets its retention periods in the light of the obligations that apply to it; the Service gives it the means to do so.
2.Retention schedule
| Data | Period | Notes |
|---|---|---|
| Patient records | For the whole term of the contract | Never deleted automatically by the Service. The clinic keeps its records for as long as the law requires of it. |
| Documents deleted by the clinic | Retention period set by the clinic (10 years by default) | Files are permanently erased when that period ends, or immediately if the clinic so decides. |
| A patient’s identity erased at their request | Immediate and irreversible erasure | The clinical record and billing are kept without the identity, as medical and accounting obligations require. |
| Invoices and accounting records | 10 years | Article 22 of Law No. 15-95 enacting the Commercial Code. |
| Audit log and security events | Term of the contract | Cannot be altered; returned and then deleted with the rest of the data at the end of the contract. |
| Evidence of acceptance of legal documents | Term of the contract, then 5 years | Limitation period for obligations between traders. |
| User accounts | While the account is active | Deactivated by the clinic when a staff member leaves; kept for the traceability of the audit log. |
| Sign-in sessions | 15 minutes, renewable for 30 days | See the Cookie policy. |
| Contact requests | 3 years after the last exchange | For people who did not become customers. |
| Backups | 12 months at most | Rotation: 7 daily, 4 weekly, 12 monthly. |
| Technical error reports | 90 days at most | Stripped of personal data before sending. |
3.End of contract
When the contract ends, the clinic’s data remains available for reading and export for ninety (90) days, then is deleted, including from backups at the end of their rotation cycle. The details are in the Terms of sale and the Data processing agreement.