Konfir has set out below the periods it typically retains your personal data for when providing our Services. The types of personal data we collect, our purposes and lawful bases for processing it, and your rights in relation to it are set out in further detail in our Privacy Notice here. We have used terms in this schedule (e.g. Account Data, Verification Data, Technical Data, Client) which are more fully explained in that Privacy Notice.
You should note that we may retain your personal data for longer than the periods set out below in certain circumstances. For instance, in order to provide you with a service you have requested, to comply with applicable legal, tax or accounting requirements or for the purposes of pursuing or defending legal claims.
Type of personal data
|
Retention Period
|
- Account Data
- Verification Data
- Technical Data
|
If you do not have a Konfir account:
- for the period of up to seven (7) years from the date on which the relevant Verification Data is provided to or obtained by us.
If you have, or set up, a Konfir account:
- for the period ending seven (7) years after the date on which your account is terminated or closed; or
- if later (and where we are permitted or required to do so by the terms of our Client agreements) for a period of up to seven (7) years from the date on which the relevant Verification Data is provided to, or obtained by, us.
If your Konfir account is wholly inactive for a period of at least three (3) years, then we will retain information:
- for a period of seven (7) years from the end of that inactive period; or
- if later (and where we are permitted or required to do so by the terms of our Client agreements) for a period of up to seven (7) years from the date on which the relevant Verification Information is provided to, or obtained by, us.
In all cases, for any longer period during which we are required by law to retain information or data.
|
|
Twelve (12) months
|
When the applicable retention period ends, unless there is a need or legal requirement to retain your data for longer, we will securely delete it or anonymise it. If this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.