You may request access to your personal information, request changes to it when it is incorrect, request us to delete it, or object to CiteMedʼs processing of your personal information. If you have consented to CiteMed processing your personal information, you may withdraw your consent at any time. The withdrawal of your consent will not have any effect on the lawfulness of CiteMedʼs processing of your information prior to your withdrawal.

Upon written request, CiteMed will provide you with information about whether we hold any personal information about you. If you request deletion of information we will respond within a reasonable timeframe and require proof of identification. If you are a CiteMed Customer, we may be required by law to retain your personal information or may need to retain your personal information in order to continue providing Services. If you close your CiteMed account, we will remove your personal information unless we reasonably believe that it may be necessary to prevent fraud or abuse; it is retained for legitimate business purposes (such as analysis of aggregated, non-personally identifiable information for account recovery purposes); or, if it is required by law. Even after we have processed your request for a change or deletion, CiteMed may retain certain residual information in the backup and/or archival copies of CiteMedʼs database for audit purposes, for our customersʼ protection, and to comply with valid legal process. We will retain the audit trail information for at least as long as is required for the subject electronic records, and it will be available for agency review and copying.

In some cases, CiteMed may process personal information about individuals on behalf of its customers. CiteMed acknowledges that these individuals also have the right to access their personal information as well as to request corrections to it or to have it deleted. However, when CiteMed has no direct relationship with the individuals whose personal information it processes, individuals who seek access, or who seek to correct, or delete their personal information, CiteMed will direct them to the relevant CiteMed client (the data controller).