Data Retention Policy

1. Data Retention Policy Overview

This policy outlines how long we retain different types of data in compliance with GDPR and UK data protection laws.

2. Account Data Retention

  • Active Accounts: Data retained while account is active
  • Inactive Accounts: Deleted after 2 years of inactivity
  • Deleted Accounts: Data permanently removed within 30 days
  • Suspended Accounts: Data retained for 1 year for appeals

3. Communication Data

  • Messages: Retained for 1 year after account deletion
  • Email Communications: Retained for 3 years
  • Support Tickets: Retained for 5 years

4. Financial Data

  • Payment Records: Retained for 7 years (legal requirement)
  • Transaction Logs: Retained for 5 years
  • Billing Information: Retained for 3 years

5. Technical Data

  • Access Logs: Retained for 1 year
  • IP Addresses: Retained for 6 months
  • Cookies: Retained per Cookie Policy

6. Legal Compliance

Data may be retained longer when required by:

  • Legal proceedings
  • Regulatory requirements
  • Law enforcement requests
  • Safety investigations

7. Your Rights

You can request:

  • Access to your data
  • Correction of inaccurate data
  • Deletion of your data
  • Restriction of processing
  • Data portability

8. Contact Information

For data retention questions: [email protected]