- We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Our retention periods are based on the type of data, the purpose for which it is processed, and the requirements of applicable laws. For instance, customer information is kept for the duration of the customer relationship plus a period of time afterwards to comply with tax and contract laws.
Data Minimisation:
- We practice data minimisation, meaning we only collect and process the minimum amount of personal data needed for specific, clearly defined purposes.
- Regular reviews are conducted to determine whether we need to retain any collected data. If data is no longer required, it is marked for disposal.
Data Disposal Practices:
- When personal data is no longer needed and the retention period has expired, it is securely deleted or destroyed.
- For electronic data, we use secure deletion methods that ensure data cannot be recovered. This may include physical destruction of hard drives or utilising software for secure data wiping.
- For physical records, we employ shredding or engage with professional disposal services that provide certificates of destruction.
Documentation and Auditing:
- We maintain records of data retention and disposal activities to provide an audit trail and ensure accountability.
- Our practices are periodically reviewed to ensure they align with current legal requirements and industry standards.
Training and Awareness:
- Our staff receives training on our data retention and disposal policies, ensuring they understand the reasons behind them and the importance of following these practices.
Data Subject Requests:
- In accordance with GDPR and other privacy regulations, individuals have the right to request the deletion of their personal data. Our procedures enable us to respond to such requests in a timely and compliant manner.
By adopting these data retention and disposal practices, we aim to balance regulatory compliance and operational efficiency, ensuring that our clients' data is handled with the utmost care throughout its lifecycle.