Data Retention Policy

Introduction

This Data Retention Policy applies to all personal data held by Server Armour, regardless of its form or medium. The purpose of this policy is to ensure that necessary records and documents are adequately protected and maintained while unnecessary records are appropriately disposed of in accordance with legal requirements.

Scope

This policy applies to all employees, contractors, agents, and third parties that handle personal data on behalf of Server Armour.

Data Retention Principles

  1. We shall not keep personal data in a form which permits identification of data subjects for longer than necessary for the purposes for which the personal data was collected.
  2. Personal data may be stored for longer periods if the data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes.

Retention Periods

We will retain personal data for different periods of time depending on the purpose for its collection:

  • Identity Data: Retained for the duration of the customer relationship plus a period of 5 years after the end of the financial year in which the customer relationship ended.
  • Contact Data: Retained for the duration of the customer relationship plus a period of 5 years after the end of the financial year in which the customer relationship ended.
  • Technical Data: Retained for a period of 1 year from the date of collection.

Data Disposal

When the retention period expires, Server Armour shall ensure that personal data is disposed of in a manner that protects the rights and privacy of the individual (e.g., shredding, erasure or anonymization of the data).

Review

This policy will be reviewed at least annually to ensure it remains relevant and compliant with applicable laws and regulations.

Contact

If you have any questions or concerns about our Data Retention Policy, please contact us at [email protected].