Data Retention & Deletion Policy
Data Retention & Deletion Policy
Effective Date: 1 June 2025
Purpose
This policy sets out how long we retain personal data and the procedures for its secure deletion, in compliance with UK GDPR Article 5(1)(e) on storage limitation.
Retention Schedule
Data Category | Examples | Retention Period
Contact Forms | Names, email addresses, message content | 2 years
Marketing Consent Records | Email opt-ins, preferences | Until withdrawal or 2 years
Web Analytics | Behavioural data, IP addresses | 26 months
Enquiry Records | Emails and form interactions | 18 months
Technical Logs | Access logs, system events | 12 months
Backups | Website and database backups | 30 days (rolling basis)
Deletion Procedures
Manual Review: Conducted regularly for inactive records
Automated Processes: Applied where supported by systems
Secure Methods: Data erased from servers, backups, and devices using permanent deletion methods
Right to Erasure
Individuals may request deletion of their personal data by contacting [email protected].
We will respond within 3 working days and complete valid requests within 30 calendar days.