Data Retention Policy
Last updated:
This policy sets out how long CopperPin, a unit of RxOnWeb keeps each category of personal data and what happens to it afterwards. It works alongside our Privacy Policy.
Contact form and Batch 7 registrations
24 months from our last contact with youEverything submitted through these forms. The period restarts when we are in active conversation with you. After it ends, the record is deleted from our database.
Privacy requests
24 months after the request is closedThe request, its status history and our response, kept so we can show how we handled it. Deleted after the period ends.
Job applications
12 months from applicationApplications and CVs sent by email. Deleted from our mailbox after the period ends, unless you are an active candidate or ask us to keep your details for future roles.
Client engagement data
Duration of the engagement plus 5 yearsData exchanged during scoping, delivery and handover, kept for contractual, accounting and legal purposes and then deleted or anonymised, unless the client agreement says otherwise.
Website analytics
As set by our analytics providerAggregate page-view and performance data from Vercel Web Analytics and Speed Insights. It is not tied to an identified individual, and it is kept according to the data-retention period of our Vercel plan.
Server and security logs
As set by our hosting providerStandard request logs kept by Vercel to operate and secure the site, for the period its platform retains them.
How deletion works
We review stored records against these periods and delete those that have expired. Some records may be kept longer when the law requires it, or when they are needed for an ongoing legal matter (a "legal hold"). They are deleted once that need ends.
Deleted data can remain in our providers' backups until those backups expire on the provider's schedule. We don't restore it from backups for any other purpose, and if a backup is ever restored we delete it again.
We may keep a minimal record that a request was handled, without the underlying data, so we can show we complied with it.
Asking for earlier deletion
You can ask us to delete your data before these periods end through the privacy request form or by emailing privacy@copperpin.io. We respond within 30 days.