POLICY AND TRUST CENTRE · LAST UPDATED 10 SEPTEMBER 2026
Data Retention and Deletion
Managing the data lifecycle from collection through exit.
Principle
We retain data only for the legitimate purpose and period necessary for contracting, security, legal compliance or dispute resolution.
Exit and deletion
When the purpose or relationship ends, we delete, anonymise or return data according to its type, agreement and applicable obligations. Backups may persist for a defined retention cycle before erasure.
Exceptions
We may retain limited records for a legal duty, claim or security investigation. This exception is not used for new marketing purposes.
Operating plan
Public website requests are deleted by default after 90 days when the current intake channel is operating. Product, customer and employee data periods, export path, backups and deletion are defined in the product contract and retention register before real operational data is accepted. This period does not override a legal duty, court request or legitimate security requirement.