Record Category

Mandated retention period

Record Owner

Payroll records

6 years after termination of contract

Directors

Employee records

6 years after termination of contract

Directors

Supplier / Reseller contracts

5 years after the agreement ended

Directors

Customer Details

• Paperwork (soft copy / hardcopy)
• CRM
• Technical information

5 years after contract termination

Data Protection Team

Service Details

2 years after decommisioning

Data Protection Team

Financial Data

6 years after termination of contract

Data Protection Team

Subject Access Requests & Withdrawal Requests

10 years

Data Protection Team

Record registers

• Privacy Notice Register
• Data Breach Register
• Data Breach Team Contact details
• Data Retention Schedule

Permanently

Data Protection Officer

Breach decisions & notifications

5 years

Data Protection Officer

Disposal of Records Form

5 years

Data Protection Officer