How retention periods are determined
Connee retains personal information only for as long as necessary for its intended purpose, legal obligations and contractual requirements.
Retention periods are determined by considering the purpose for which information was collected, applicable legal and regulatory requirements, customer contracts and data processing agreements, and security, operational and business needs.
Customer data
Customer data processed on behalf of customers is retained and deleted in accordance with the relevant contract and Data Processing Agreement.
After a Subscription ends, customers have 30 days to request an export of Customer Data. Connee retains that data for one further calendar month after the export period before deletion or anonymisation, subject to the customer’s lawful instructions, the DPA and applicable legal retention requirements.
Deletion and backups
When data is no longer required, Connee securely deletes or anonymises it where appropriate. Deletion arrangements cover live systems, exports, temporary files and third-party services where applicable.
Backups are managed through retention and expiry processes. Where immediate deletion from backups is not reasonably practicable, data remains protected and is not restored to active use except where necessary for recovery or other lawful purposes.
Legal requirements
Where information must be retained to comply with a legal obligation or to establish, exercise or defend legal claims, it may be retained for the necessary period and protected appropriately.
Contact us
For information about retention or a data return or deletion request, contact [email protected] or [email protected].