Legal & Safety pages
Our approach
We keep personal data only as long as necessary for the purpose it was collected, and to meet legal obligations. Retention periods vary by data type. Where a specific legal period applies, we follow it; where none is fixed, we keep data only as long as operationally needed.
Account data
Account data is kept while your account is active. After closure, we delete or anonymise it, except where we must keep some records (see below). [TO BE COMPLETED — specify post-closure period].
Safeguarding records
Safeguarding records are kept for longer where required by safeguarding guidance or law. [TO BE COMPLETED — confirm period, e.g. in line with your governing-body safeguarding policy].
Financial and marketplace transactions
Financial and marketplace transaction records are kept as required by tax and accounting law — typically [TO BE COMPLETED — confirm, e.g. six years] — and for dispute resolution.
Legal obligations, security and audit logs
We keep security and audit logs for as long as needed to protect the platform and meet legal requirements. [TO BE COMPLETED — specify log retention].
Marketing consent
Where you consent to marketing, we keep that consent and related data until you opt out. After opt-out we stop marketing to you and remove marketing data on a regular cycle.
No invented periods
We have not inserted arbitrary retention periods where a legal or operational basis has not been established. Items marked [TO BE COMPLETED] should be confirmed before launch.