Data Retention Policy

Effective Date: September 2, 2024

Introduction

Medivive (“we,” “us,” “our”) is committed to maintaining the privacy and security of personal data, including Protected Health Information (PHI). This Data Retention Policy outlines our procedures for storing and securely disposing of personal data in compliance with federal and state laws.

Purpose

The purpose of this policy is to establish guidelines for the retention and disposal of records and data that Medivive generates or collects. This includes data related to patient health, business operations, and other sensitive information.

Types of Data Covered

This policy applies to all forms of data, including:

Patient Records: Medical histories, consultation notes, treatment plans, prescriptions, and other PHI.
Operational Data: Business records, financial documents, contracts, and employee information.
Communications: Emails, texts, voicemails, and other communications that include personal or sensitive information.

Retention Periods

Medivive retains data based on the following guidelines:

Patient Records: Retained for a minimum of seven (7) years from the last date of service or as required by state law, whichever is longer.
Operational Data: Retained for a minimum of five (5) years or as required by applicable laws and regulations.
Communications: Retained for a minimum of two (2) years, unless required to be retained longer by law or operational necessity.

Data Security

During the retention period, Medivive ensures that all personal and sensitive data is securely stored using appropriate administrative, physical, and technical safeguards. Access to retained data is restricted to authorized personnel only.
Data Disposal At the end of the retention period, or when data is no longer needed, Medivive will dispose of the data securely to prevent unauthorized access. Disposal methods may include:

Digital Data: Permanent deletion using secure data wiping tools, or physical destruction of storage media.
Physical Records: Shredding, incineration, or other approved destruction methods that ensure the data cannot be reconstructed.

Legal and Regulatory Compliance

Medivive complies with all applicable federal and state laws governing data retention, including but not limited to the Health Insurance Portability and Accountability Act (HIPAA), Health Information Technology for Economic and Clinical Health (HITECH) Act, and state-specific retention requirements.

Regular Review

This policy will be reviewed annually or as necessary to ensure compliance with legal requirements and best practices. Changes to this policy will be communicated to all relevant personnel and will take effect immediately upon adoption.

Contact Information

If you have any questions or concerns regarding this Data Retention Policy, please contact our Privacy Officer:

Privacy Officer

Medivive
Phone: 1-844-MYMEDI1 (1-844-696-3341)
Email: info@mymedivive.com
Address: 14 W Jordan St #226, Pensacola, FL 32501

Updates to This Policy

We may update this Data Retention Policy from time to time. If we make significant changes, we will notify you through our website or other means. The date of the last update will be indicated at the top of the policy.

Chronic Disease Management

Telepharmacy Services

Preventative Health Services

Pediatric Telehealth Services

Remote Monitoring for Chronic Conditions

Geriatric Telehealth Services