Data Deletion Policy

Effective Date: March 1, 2026 · Last Updated: March 18, 2026

Summary: You have the right to request deletion of your personal information held by Clinical Media Hub. This page explains what we delete, what we must retain by law, and how to make a request.

1. Your Right to Deletion

Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to request that CMH delete personal information we hold about you, subject to certain legal exceptions. This right applies to website visitors who submitted contact forms, current and former subscribers, and their authorized account users.

2. What Happens When You Cancel

Your practice website is taken offline within 24 hours of your cancellation date.
Subscriber dashboard access is terminated immediately.
Account data (practice profile, content, settings) is retained 90 days for possible reactivation.
After the 90-day period, all account data is deleted within 30 additional days (~120 days total).
Your dedicated AWS instance is decommissioned and all instance data is purged.

3. How to Request Early Deletion

Step 1 — Email privacy@clinicalmediahub.com with subject “Data Deletion Request.” Include: your full name, account email, practice name, and what you want deleted.

Step 2 — We send a verification email to the address on file. You must confirm your identity before deletion proceeds.

Step 3 — We confirm receipt within 5 business days and complete deletion within 45 days (up to 90 days if needed).

4. What We Will Delete

Your account profile and contact information.
Practice profile data, uploaded content, and dashboard settings.
AI-generated content drafts and approval history.
Your practice website and all associated files.
Social media integration tokens and connected third-party API credentials stored by CMH.

5. What We Must Retain

Billing and transaction records: 7 years (federal and California tax law).
HIPAA audit logs (BAA subscribers): 7 years (45 CFR §164.530(j)).
Fraud prevention: Minimal data to prevent abuse.
Legal holds: Data subject to active litigation or court order.
Aggregated, de-identified data: Statistical data that cannot identify you is not subject to deletion.

6. Facebook / Meta Data Deletion

To revoke CMH’s Facebook access and delete associated data: (1) Remove CMH from your Facebook App permissions, then (2) email privacy@clinicalmediahub.com with subject “Facebook Data Deletion.” CMH only stores the access token you authorized — not your personal Facebook data.

7. Patient Data

CMH does not control patient Protected Health Information (PHI) on behalf of patients directly. If you are a patient whose information was collected through a practice website powered by CMH, please contact the medical practice directly. If you believe CMH has inadvertently collected your PHI, email privacy@clinicalmediahub.com immediately.

8. Contact

Clinical Media Hub
Data Deletion Requests: privacy@clinicalmediahub.com
Website: clinicalmediahub.com/contact