In short: How long we keep different types of information, and how we delete it.
Principle
We keep personal data only as long as we need it for the purpose it was collected, or as the law requires.
Retention periods
- Website enquiries with no project: 24 months after last contact.
- Client project records: contract term plus 7 years, or longer if the law requires.
- Recruitment records (unsuccessful candidates): 12 months.
- Security logs: 12 months.
- Whistleblowing records: as long as needed to investigate and resolve, then securely deleted.
Deletion
At the end of the period, data is securely deleted or anonymised. Backups are overwritten on their normal cycle.
Requests
You can ask us to delete your data sooner, unless we must keep it by law.