Data Handling & Retention Policy
We retain customer and user information only for a period appropriate to its purpose, and promptly delete or anonymize it once the purpose has been achieved. Our handling of key data is as follows.
| Data type | Retention period | Legal basis | Notes |
|---|---|---|---|
| Member account information (name, contact, login) | During the contract; deleted early once the purpose is met | Act on the Protection of Personal Information | Deleted without delay after the purpose is achieved |
| Payments, invoices, sales records | 7 years | Corporation Tax Act | Retention required as tax accounting records |
| Receipts and vouchers | 7 years | Corporation Tax Act | — |
| Inquiry, consultation and support history | For the period needed after resolution | Act on the Protection of Personal Information | For service improvement and dispute handling |
| Hosting, email and uploaded data (customer content) | Kept during the contract; deleted after the prescribed period following termination | Contract | Customer-owned data, including backups |
| Server and access logs | Deleted after a set period for security and incident response | Legitimate interest | For investigating unauthorized access and incidents |
| AI Hanes knowledge (customer-registered KB) | During the contract; deleted upon termination | Contract | Customer-owned; not reused for training |
Practical points
- We do not retain personal information longer than necessary after its purpose is achieved.
- Tax records (sales vouchers) and customer personal information are managed separately.
- We do not, as a rule, collect special-care personal information.
- Data you upload or store belongs to you and is deleted according to the prescribed procedure upon termination.
References
- Personal Information Protection Commission (PPC)
- e-Gov Law Search