We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
You can request further details of retention periods for different aspects of your personal data by contacting us.
In some circumstances you can ask us to delete your data: see “Your legal rights” below for further information.
In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
Author: Kelsey Traher, COO
Date of change: May 2022
Summary of changes: Updated to remove reference to the EU Privacy Shield, and to add reference to SCCs
Author: Brendan Moore, CTO
Date of change: May 2018
Summary of changes: Initial formalised policy document