Privacy policy
This implementation structure covers collection, purpose limitation, access, retention, correction, export and deletion workflows. Final legal wording requires review.
Information collected
Account identifiers, consent records, health information supplied for care, operational events and transaction references.
Access and sharing
Role and resource rules limit access. External processors receive only what is necessary for the configured service.
Retention and rights
Approved policies determine retention, correction, export, deactivation and deletion handling while preserving required clinical and audit records.