Data Retention Policy

We apply the following principles to all personal data we hold:

• •We only keep data for as long as it is needed for the purpose it was collected
• •We review data holdings regularly and delete or anonymise data that is no longer required
• •We do not retain data 'just in case' it might be useful in future
• •We apply secure deletion methods when disposing of personal data

The following retention periods apply to the main categories of data we hold:

• •Enquiry and contact records: 2 years from the date of last contact
• •Client contracts and correspondence: 6 years from the end of the contract
• •Financial records (invoices, payments): 6 years in accordance with HMRC requirements
• •Service user personal data processed for documentation: 30 days after delivery of completed documents
• •Employee and contractor records: 6 years after the end of employment or engagement
• •Website enquiry form submissions: 2 years from submission

We may retain data beyond the standard retention periods in the following circumstances:

• •Where retention is required by law or regulation
• •Where data is subject to a legal hold in connection with actual or anticipated litigation
• •Where you have given explicit consent to a longer retention period

In all such cases, we will document the reason for extended retention.

When personal data reaches the end of its retention period, we delete it securely. For electronic data, this means permanent deletion from all systems and backups. For any physical documents containing personal data, these are shredded or disposed of via a secure destruction service.

You have the right to request erasure of your personal data before the end of its standard retention period in certain circumstances. Please see our Privacy Policy for full details of your rights and how to exercise them.

To make a data erasure request, contact us at [email protected].