Retention & Deletion Policy
NurseLink keeps information only for as long as it is reasonably needed for the relevant purpose, security, disputes and legal obligations.
1. Current MVP account information
Basic account and profile information is retained while an account is active. When an account is closed, NurseLink intends to remove or de-identify ordinary profile information after a reasonable administrative and backup period unless it must be retained for security, disputes, legal obligations or fraud prevention.
2. Authentication and security logs
Security and authentication events may be retained for a limited period to investigate account abuse, attacks, unauthorized access and disputes. The production retention schedule will document the precise period and periodic deletion process.
3. Contact enquiries
General enquiries should be deleted when they are no longer needed for the enquiry or related business purpose. Sensitive health information should not be submitted through the general contact page.
4. Nurse verification records
Verification records may need to be retained while a nurse remains active and for a limited period afterwards to document the basis of verification, investigate disputes and satisfy applicable obligations. Unnecessary copies of identity documents should not be retained indefinitely.
5. Health and care records
Real clinical/care records are not yet enabled. Before activation, NurseLink will publish a defined clinical retention schedule based on the service model, applicable Jamaican healthcare/legal requirements and professional advice rather than applying an arbitrary web-platform retention period.
6. Payment records
When payments go live, financial transaction records may need to be retained for accounting, tax, fraud and dispute purposes. The final period will be aligned with applicable Jamaican financial-record obligations and the payment-provider arrangement.
7. Backups and deletion
Deleted information may remain temporarily in protected backups until the backup rotation expires. Production deletion procedures will include verification that information is removed from active systems and expires from backups according to schedule.
8. Legal holds
Deletion may be paused where information is reasonably required for a legal claim, regulatory request, fraud investigation, safeguarding matter or unresolved dispute.