Data Retention Policy

Last Updated: February 24, 2024

This Data Retention Policy explains how Dealgrabvibes collects, stores, and removes personal and operational data. It applies to all users of our services and outlines the periods for which different categories of data are retained and the reasons those periods have been chosen.

1. Purpose

We retain data only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Once data is no longer required for these purposes, it is securely deleted or anonymised.

2. Scope

This policy applies to all personal data and business data processed by Dealgrabvibes, including data collected through our website, service interactions, communications, and any third-party integrations we operate.

3. Categories of Data and Retention Periods

The table below summarises the main categories of data we hold and the standard retention period applied to each.

Data Category	Examples	Retention Period	Basis for Retention
Account and registration data	Name, email address, password hash, account preferences	Duration of account plus 2 years after closure	Service delivery, legal obligation
Transaction and billing records	Payment history, invoices, receipts	7 years from transaction date	Financial and regulatory compliance
Service usage data	Session logs, feature interactions, access timestamps	12 months from collection	Service improvement, security monitoring
Communication records	Support tickets, emails, chat transcripts	3 years from last interaction	Dispute resolution, service quality
Marketing and consent records	Opt-in records, campaign interactions, preferences	3 years from last consent action	Consent management, compliance
Technical and security logs	IP addresses, error logs, authentication events	90 days from generation	Security, fraud prevention
Anonymised and aggregated data	Statistical reports, trend data	Indefinite	No personal data present after anonymisation

4. How Retention Periods Are Determined

When setting retention periods, we consider the following factors:

5. Data Deletion and Anonymisation

5.1 Deletion Process

When a retention period expires, data is permanently deleted from our active systems and backups within a reasonable operational window, typically not exceeding 90 days from the expiry date. Deletion is carried out in a manner that makes recovery of the data impractical.

5.2 Anonymisation

Where we wish to retain data for analytical or statistical purposes beyond its standard retention period, we anonymise it so that no individual can be identified, directly or indirectly, from the remaining dataset. Anonymised data falls outside the scope of this policy.

5.3 Backup Systems

Data held in backup systems follows a separate backup rotation schedule. Backups are purged on a rolling basis consistent with our standard retention periods. We do not restore deleted data from backups except where required by law or to recover from a system failure.

6. Account Closure

When a user closes their account or requests deletion of their data, we initiate deletion of personal data within 30 days of the request being confirmed, subject to any legal hold requirements. Certain records, such as transaction histories, may be retained beyond account closure where we are legally required to do so. We will inform the user if any data must be retained after their deletion request.

7. Legal Holds

Where data becomes relevant to an ongoing legal proceeding, regulatory inquiry, or internal investigation, normal retention schedules are suspended for the affected data until the matter is resolved. Once the hold is lifted, standard retention and deletion procedures resume.

8. Third-Party Data Processors

Where we share data with third-party service providers for processing on our behalf, we require those providers to apply retention standards consistent with this policy. Data shared with third parties is not retained by those parties beyond what is necessary to deliver the contracted service.

9. User Rights Regarding Retained Data

Individuals whose data we hold may have the right to request access to their data, request correction of inaccurate data, request deletion of their data where no legal basis for retention exists, and object to certain processing activities. Requests can be submitted by contacting us at info@dealgrabvibes.info. We will respond within a reasonable timeframe in accordance with applicable obligations.

10. Data Security During Retention

All data retained under this policy is protected by appropriate technical and organisational security measures. Access to retained data is restricted to personnel with a legitimate need. We review access controls and security measures regularly to ensure they remain appropriate for the sensitivity of the data held.

11. Policy Review

This policy is reviewed at least annually and updated whenever there is a material change to our data processing activities, legal obligations, or organisational structure. The date at the top of this document reflects the most recent revision. Continued use of our services following an update constitutes acknowledgement of the revised policy.

12. Contact

If you have questions about this Data Retention Policy or wish to exercise any rights in relation to your data, please contact us: