Data Retention Policy

How we manage, retain, and delete your information

Policy Overview

SoberResources.org is committed to responsible data stewardship. We retain personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

7 Years
Medical Records (HIPAA)
90 Days
Analytics/Tracking
Immediate
Upon Request

Data Retention Schedule

Treatment Inquiry Information

Information submitted through our lead forms (name, phone, email, insurance, treatment preferences).

7 Years Required for HIPAA compliance and medical record retention

Analytics & Usage Data

Aggregated website usage statistics, page views, and click patterns (anonymized).

90 Days Anonymized data for site improvement

Ad Fraud Detection Data

Session tracking data, proxy information, and interaction patterns for fraud prevention.

90 Days Automatically purged after 90 days

Facility Reviews

User-submitted reviews and ratings of treatment facilities.

Until Deleted Retained until user requests deletion

Security Audit Logs

Access logs, authentication events, and security-related activity (hashed IPs, no PII).

1 Year Required for security compliance

Marketing Communications

Email addresses and communication preferences for newsletters and updates.

Until Unsubscribed Deleted upon unsubscribe request

Your Right to Deletion

You have the right to request deletion of your personal information at any time, subject to legal and regulatory retention requirements.

What We Can Delete Immediately

  • • Marketing preferences
  • • Optional profile information
  • • Review content (upon request)
  • • Communication history

What Must Be Retained

  • • Medical/lead records (HIPAA: 7 years)
  • • Insurance verification logs
  • • Legal hold information
  • • Audit logs (1 year minimum)

How to Request Data Deletion

1

Submit Request

Email privacy@soberresources.org with "Data Deletion Request" in the subject line.

2

Verification

We will verify your identity to ensure the request is legitimate and protect your privacy.

3

Processing

We will process your request within 30 days and delete all data that is not legally required to be retained.

4

Confirmation

You will receive confirmation once the deletion is complete, including any exceptions due to legal retention requirements.

Automatic Data Purging

Our systems automatically purge data according to the retention schedule above. This process runs daily to ensure data is not retained longer than necessary.

Data TypeRetentionPurge Schedule
Ad fraud tracking90 daysDaily automated purge
Analytics data90 daysWeekly aggregation & purge
Security logs1 yearMonthly purge of expired logs

Questions About Data Retention?

Contact our privacy team for more information about how we handle your data.