Keeping information only for an approved reason
Standard: ClueCheck working retention schedule
Status: Operational draft pending legal and business approval
Owner: ClueCheck management and the relevant project owner
| Category | Working target | Action at end |
|---|---|---|
| Enquiries and quotations | Up to 24 months after meaningful contact | Delete or anonymise unless an active relationship or hold applies. |
| Marketing consent and suppression | As long as needed to honour choices and demonstrate compliance | Keep only the minimum suppression evidence. |
| Client contracts, billing and payments | Normally 6 years after the relevant financial year, subject to approval | Delete or archive securely when the approved period ends. |
| Shopper applications and quality records | Up to 6 years after the last assignment, subject to necessity | Delete unnecessary profile, identity and performance material. |
| Reports, receipts, photographs, recordings and location evidence | Project-specific period recorded in the order or DPA | Return, delete, redact or anonymise according to the instruction. |
| Security, audit and incident records | Period approved by security, legal and operational owners | Restrict access and delete when the accountability purpose ends. |
A legal, accounting, fraud-prevention, security or dispute hold must identify the category, reason, owner, start date and review date. A deletion request does not automatically remove information that must lawfully be retained, but the response should explain the limited category and reason rather than promising total erasure.
Project owners should review overdue records at least quarterly, confirm that backups and exports follow the same retention instruction, and record exceptions. No employee should create a local copy of evidence or identity material without a documented purpose and approved storage location.
Related information: Governance Centre · Privacy Policy · Contact ClueCheck