Data Retention
Medical Records (PHI)
EWBC retains medical records in accordance with HIPAA and New York State laws. These records must be retained for legally required periods and cannot be deleted upon request except as permitted by law.
Website Data (Non‑Medical)
Information submitted through ewbc.com is retained only as long as necessary to:
- Respond to inquiries
- Manage communications
- Meet legal, regulatory, or operational requirements
Information collected through the public website is not used for medical diagnosis or treatment.
Patient Portal Data
Patient portal information is retained in accordance with applicable healthcare laws, regulations, and system requirements. Medical records accessed through the portal remain subject to legal retention requirements even if a portal account becomes inactive.
Data Deletion Requests
EWBC provides limited options for deletion of certain non‑medical information, as described below.
What Can Be Deleted
Patients and website users may request deletion of certain non‑medical information, including:
- Website form submissions
- Contact information submitted through ewbc.com
What Cannot Be Deleted
Medical records (PHI) are retained as required by law and generally cannot be deleted upon request.
Contact for Data Requests
If you have questions about data retention or would like to submit a request, please contact:
Shannon DeMay
Email: sdemay@ewbc.com
Phone: (585) 758-7027
Please indicate that your request relates to website or portal data. Requests will be reviewed and fulfilled as appropriate in accordance with applicable laws, regulatory requirements, and operational needs.
Related Policies
For more information, please refer to:
- Privacy Policy
- Patient Portal Privacy Policy
- HIPAA Notice of Privacy Practices