Privacy Policy

1. Clinical Data & GDPR Compliance

Metrica is built on "Privacy by Design" principles. We act as a Data Processor for healthcare practitioners, who remain the primary Data Controllers. All health outcomes and clinical scores are encrypted in transit and at rest, securely tied to a 12-week monitoring cycle.

2. Data Anonymization, Benchmarking, and Clinical Research

To advance medical science and improve healthcare outcomes, Metrica processes clinical tracking data (such as standardized Bournemouth Questionnaire scores) into a completely de-identified and aggregated format. Once raw data undergoes this irreversible anonymization process, it no longer constitutes personal data under GDPR or PHI under HIPAA.

Metrica reserves the right to utilize this aggregated, anonymous data layer to:

• Provide practitioners with comparative clinical benchmarking metrics (e.g., comparing aggregate 12-week percentage improvements within specific healthcare categories).
• Conduct statistical analysis and publish findings in peer-reviewed scientific and medical journals to evaluate the macro-effectiveness of clinical protocols.

3. The Right to Erasure & Data Minimization

In accordance with GDPR, patients have the right to withdraw consent for active monitoring at any time. Metrica provides an automated workflow that permanently erases all personally identifiable active survey records and communication logs. Please note that data which has already been completely and irreversibly anonymized or aggregated into our research datasets cannot be removed, as it contains no identifying linkages to an individual.

4. Data Retention for Clinical Audit

Once a 12-week treatment tracking cycle is completed, the raw record is locked within the practitioner's dashboard workspace to ensure clinical integrity and to comply with statutory medical record-keeping standards. These finalized operational records cannot be modified or deleted via automated patient-facing withdrawal tools to preserve the clinical audit trail.