This schedule documents how long NobleMind Counseling, PLLC retains the data categories it collects through this website. PHI handled inside the EHR is governed separately under our HIPAA Notice; this page covers the website surface only. To exercise any of the rights below, use the privacy request form.
Summary
| Category | Retention | Basis |
|---|---|---|
| Contact / intake submissions (non-PHI) | 24 months from submission | Inquiry follow-up + audit |
| New-client intake (limited PHI) | 7 years from last clinical contact | Ohio ORC 3701.74 + HIPAA |
| Cookie consent records | 24 months from decision | GDPR Art. 7(1) proof-of-consent |
| DSAR requests | 36 months from resolution | Regulatory audit (HIPAA / GDPR / CCPA) |
| Audit log (correlation-id, IP, UA) | 12 months from event | Security incident response |
| CSP violation reports | 90 days | Security telemetry |
| Server access logs | 30 days rolling | Operational |
| Email queue | 90 days after delivery | Deliverability debugging |
Deletion mechanics
Retention is enforced by daily scheduled jobs that hard-delete rows past their cutoff. We do not retain soft-deleted shadows. Job runs are logged with row counts only — never row contents.
Shortening retention
You may shorten retention for any of your own data by filing a deletion request via the privacy request portal. PHI deletion is bounded by Ohio's 7-year medical record minimum and may be denied in whole or in part on that basis; we will explain any partial denial in writing within the SLA window described in the form.
Vendors
Retention at vendor systems (EHR, video platform, email provider, hosting) is governed by their own BAAs / DPAs. Copies are available on request from the Privacy Officer.
Contact
Privacy Officer: Privacy Officer (name available on request) · admin@nobleminds360.com · +1 (419) 309-6961