Privacy Policy, Data Retention and Account Deletion

1. Introduction

ECAPLUS HEALTHCARE INNOVATIONS LLC respects user privacy and is committed to protecting personal information, account information, and health-related data. This policy describes what information we collect, why we collect it, how long we retain it, and how users may request access, correction, account deletion, or data deletion.

ECAPLUS may process information in accordance with applicable privacy and healthcare data protection principles, including Dominican Republic Law 172-13, HIPAA where applicable, GDPR as an international best-practice reference, and applicable healthcare, tax, accounting, contractual, and security obligations.

2. Information We Collect

ECAPLUS may collect and process the following categories of information:

3. How We Use Information

ECAPLUS uses collected information for the following purposes:

• To create, manage, and secure user accounts.
• To provide telemedicine, patient-follow-up, and healthcare coordination services.
• To allow users and authorized healthcare providers to access relevant health records.
• To process subscriptions, payments, and billing records.
• To provide customer support and respond to user requests.
• To send service notifications, appointment reminders, and important account communications.
• To improve platform functionality, security, reliability, and user experience.
• To comply with legal, regulatory, medical, accounting, contractual, and security obligations.

4. Data Retention Policy

ECAPLUS retains personal information only for as long as necessary to provide services, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support healthcare recordkeeping requirements.

5. Account Deletion

Users may request permanent deletion of their ECAPLUS account at any time. Account deletion removes or disables access to the user account and starts the deletion or anonymization process for eligible personal information.

How to Delete Your Account

1. Open the ECAPLUS mobile application.
2. Go to Settings.
3. Select Privacy.
4. Select Delete Account.
5. Confirm the account deletion request.

After identity verification, ECAPLUS will deactivate the account and delete or anonymize eligible personal data from active systems within 15 business days, unless a legal, healthcare, tax, accounting, contractual, fraud prevention, security, or regulatory retention obligation applies.

6. How Users Can Request Data Deletion

Users may request deletion of their personal information and eligible health-related data through any of the following channels:

Required Information

• Full name registered on the platform.
• Email address associated with the account.
• Phone number associated with the account, if applicable.
• Type of request: full account deletion, partial data deletion, or anonymization.
• Copy of a valid government-issued identification document, when required to verify identity.

7. Data Deletion Process and Timelines

Once ECAPLUS receives a valid deletion request, the request is reviewed, the user’s identity is verified, and eligible data is deleted, restricted, or anonymized according to the following timelines:

8. Data That May Be Retained After a Deletion Request

Some information may not be immediately deleted if ECAPLUS is required to retain it for legal, regulatory, healthcare, accounting, contractual, fraud prevention, security, or dispute resolution purposes.

9. User Privacy Rights

Depending on applicable law, users may have the following rights:

• Request access to personal information held by ECAPLUS.
• Request correction of inaccurate or incomplete information.
• Request deletion of eligible personal information.
• Request account deletion.
• Request restriction of processing where applicable.
• Object to processing for marketing or non-essential purposes.
• Request a copy of available account information in a standard format where applicable.

10. Sharing of Information

ECAPLUS does not sell personal information. ECAPLUS may share information only when necessary to provide services, comply with legal obligations, protect users, maintain platform security, or work with authorized service providers.

• Healthcare providers authorized to participate in the user’s care.
• Cloud hosting, infrastructure, security, and technical service providers.
• Payment processors and billing service providers.
• Laboratories, pharmacies, insurers, or healthcare partners where applicable.
• Regulatory, legal, or government authorities when required by law.

11. Security Measures

ECAPLUS uses administrative, technical, and organizational safeguards designed to protect personal information and health-related data against unauthorized access, loss, misuse, alteration, or disclosure.

• Access controls and role-based permissions.
• Authentication and session security controls.
• Encryption where appropriate.
• Audit logs and monitoring.
• Secure backup and recovery procedures.
• Internal privacy and security policies.

12. Children and Minors

ECAPLUS services involving minors must be used by or with the authorization of a parent, guardian, healthcare provider, or authorized representative where required. Health-related records of minors may be retained according to applicable healthcare and legal recordkeeping requirements.