Profile and record choices
Owners can review and update available details in the signed-in workspace. Correcting an owner-entered field does not alter the original source document or a clinic's independent record.
Processing and consent choices
Vault continues manual storage after welcome credits end; eligible credits or Intelligence can enable automated processing. Optional consent-based processing must use a specific affirmative choice and be as easy to withdraw as to give. Withdrawal does not affect earlier lawful processing.
Export and deletion
Use export and data controls for available controls. Full closure has a live status page. GDPR portability may require a structured, commonly used, machine-readable format and is not necessarily identical to every product export.
GDPR rights where applicable
- Information about processing and access to personal data.
- Rectification of inaccurate or incomplete personal data.
- Erasure or restriction where the legal conditions are met.
- Portability for qualifying processing based on consent or contract.
- Objection to direct marketing and, in qualifying cases, legitimate-interest processing.
- Withdrawal of consent and safeguards relating to solely automated significant decisions.
How a final request process must work
Requests must be easy to make electronically, handled without undue delay and generally within one month, and supported by proportionate identity checks. Any refusal must explain the reason and the right to complain to a supervisory authority and seek judicial remedy. No fee should apply unless GDPR permits one for manifestly unfounded, excessive, or repeated requests.