This policy explains how long we keep different types of personal data and our procedures for secure data deletion in compliance with GDPR and UK GDPR.
Last Updated: August 1, 2024
Version: 2.0
Active User Accounts
While account is active
Inactive Accounts
3 years after last login
Application Data
2 years after application
Marketing Consents
Until withdrawn + 3 years
Support Tickets
3 years after resolution
Financial Records
7 years (legal requirement)
"Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed."
This policy ensures we comply with the storage limitation principle by defining clear retention periods based on the purposes for which we process personal data.
Duration: While account remains active (user continues to log in and use services)
Legal Basis: Contract performance, legitimate interests for service improvement
Duration: 3 years after last login or account activity
Deletion Process: Automated review and deletion on rolling basis
Warnings: Email notifications at 2 years, 2.5 years, and 30 days before deletion
| Data Type | Retention Period | Reason |
|---|---|---|
| Successful applications | 2 years after hire date | Reference purposes, employment records |
| Unsuccessful applications | 12 months after decision | Equality monitoring, potential future opportunities |
| Withdrawn applications | 6 months after withdrawal | Statistical analysis, process improvement |
| Interview recordings/notes | 6 months after decision | Feedback purposes, dispute resolution |
| Data Category | Retention Period | Storage Method | Purpose |
|---|---|---|---|
| Google Analytics data | 26 months (automatically deleted) | Anonymized/Aggregated | Website optimization |
| Server logs | 90 days | IP addresses masked after 7 days | Security, performance monitoring |
| Error logs | 1 year | Personal data redacted | Technical debugging |
| Security logs | 2 years | Encrypted storage | Incident investigation |
| Performance metrics | 18 months | Aggregated only | Service improvement |
Data Protection Officer: support@skillthrive.io
Privacy Team: support@skillthrive.io
Legal Team: support@skillthrive.io
Online Form: /legal/privacy-request
Email: support@skillthrive.io
Post: Data Protection Team, Asterix Technologies LLP, 167-169 Great Portland Street, London W1W 5PF
Contact our Data Protection team or submit a privacy rights request to exercise your data rights.