Data retention schedule last updated August 2025. See also the privacy notice.
| Data category | Examples | Retention period | Action on expiry | Justification | Responsibility |
|---|---|---|---|---|---|
| Marketing data | Mailing lists, campaign records, consents. | 2 years since last contact. | Delete. | UK GDPR, Consent validity. | Marketing/ Director |
| Website user data | User accounts, analytics, contact forms. | 2 years since last activity. | Delete. | Business need, consent. | Marketing/ Director |
| Supplier/ Contractor Records | Contracts, contact information, invoices. | 6 years after contract ends. | Delete. | Limitation Act, Business need. | Finance/ Director |
| Client consultancy files | Project proposals, reports, research, ad correspondence. | 6 years after project ends. | Review and delete or anonymise. | Contractual obligation | Operations/ Director |
| Employee records | Contracts, pay, performance, right to work. | 6 years after employment ends. | Delete or anonymise. | Limitation Act, Employment Law | HR/ Director |
| Payroll and financial data | Payslips, expenses, accounts, invoices. | 7 years after end of tax year. | Delete or destroy. | HMRC, Companies Act. | Finance/ Director |