Settings → Privacy requests
Purpose
Submit a consumer privacy request: to access a copy of, or request deletion of, the personal information CS Logbook holds about you. This is CS Logbook's in-product intake for rights under the California Consumer Privacy Act (CCPA/CPRA) and equivalent U.S. state consumer-privacy laws.
HIPAA does not apply to CS Logbook: veterinary records are not protected health information and veterinarians are not covered entities (see ADR-007). The framework here is state consumer-privacy law, not HIPAA.
Regulatory basis: CCPA/CPRA and state equivalents; a DEA retention floor constrains what can actually be deleted (see below).
When to use it
- You want a copy of your data: request an export of the personal information tied to your account
- You're leaving and want your personal data removed: request deletion of personal information that is not subject to a legal retention hold
- A combined request: both access and deletion
Walkthrough
Step 1: Open your personal settings
Open Settings > My profile inside your clinic (also at /home/settings). These are your personal account settings, not a clinic's. The Privacy card (shield icon, "Privacy requests") is on that page.
Step 2: Click "Make a request"
A two-step confirmation dialog opens.
Step A: choose the request:
- Request type (required): Access (get a copy), Deletion (request removal), or Both.
- Note (optional, up to 2000 characters): add any detail that helps us process the request.
Click Continue.
Step B: verify with a one-time code:
- CS Logbook emails a one-time code (OTP) to your account email.
- Enter the code to confirm the request is really from you.
On success, the request is recorded and you'll see a confirmation toast.
Step 3: What happens next
The request is recorded with the time it was received. A CS Logbook administrator reviews it and sends the status and outcome to you by email. You are not charged, and submitting a request never affects your ability to keep using the app.
What a deletion request covers
- Your personal data. CS Logbook deletes or de-identifies personal data that is eligible for removal and disables your sign-in access. If a clinic record identifies you as the person who recorded or witnessed an action, attribution needed to preserve that record's integrity may remain, but it will not depend on an active user account.
- Records maintained for your clinic. Deleting a user's personal data does not delete the clinic's controlled-substance or other operational records. A request concerning the clinic's entire account must come from its account owner and remains subject to applicable legal, security, and record-integrity requirements.
- After cancellation. The account is read-only for 90 days so the clinic can export its records; the end of that window does not delete them.
Related
- Legal documents: the Data Processing Addendum and Subprocessor list describe how we process personal information
- Settings → Data export: self-service export of your records
- People → Clients § Address PII: how pet-owner personal information is protected