Data Retention Policy

This Data Retention Policy (the "Policy") explains how [LEGAL ENTITY NAME] ("we", "us", or "our"), operating the website godoscertificationinfo.com from [JURISDICTION], collects, stores, retains, and disposes of personal and business data relating to individuals and organisations who contact us or use our consulting services.

We provide independent consulting services to advertisers worldwide seeking Google Government Documents and Services (GODOS) certification and related advertising compliance support. We are not affiliated with, endorsed by, or acting on behalf of Google or any government body.

The purpose of this Policy is to ensure that we retain data only for as long as necessary, comply with applicable data protection laws, and dispose of data securely once it is no longer required. This Policy should be read together with our Privacy Policy.

This Policy applies to all personal data and business information processed by [LEGAL ENTITY NAME] in the course of operating godoscertificationinfo.com, regardless of the format in which it is held or the location from which it is accessed.

It applies to all employees, contractors, and third-party service providers who handle data on our behalf. Any such parties are required to comply with the retention and disposal standards set out in this Policy.

We retain different categories of data depending on how you interact with us. We aim to collect and keep only the information that is relevant and necessary for our legitimate business purposes.

We retain data to enable us to respond to enquiries, deliver our consulting services effectively, maintain accurate business records, and comply with legal and regulatory obligations.

We do not retain data indefinitely and do not use retained data for purposes incompatible with those for which it was originally collected.

We retain each category of data for a defined period, after which it is securely deleted or anonymised unless a longer retention period is required by law or to protect our legitimate interests. The periods below are placeholders to be confirmed following legal review.

Where the same data serves multiple purposes with different retention requirements, we apply the longest applicable retention period.

Our retention practices are guided by the principle of data minimisation and the requirement not to keep personal data longer than necessary. Retention periods may be extended where required to comply with statutory obligations in [JURISDICTION] or in other jurisdictions where our clients are located.

Where a legal, regulatory, or accounting obligation requires a specific minimum retention period, that obligation will take precedence over the standard periods set out in this Policy.

Subject to applicable law, you have the right to request that we delete personal data we hold about you. We will assess each request and, where no overriding legal obligation or legitimate interest requires continued retention, we will delete the data within a reasonable timeframe.

To make a deletion request, please contact us at [CONTACT EMAIL]. We may ask you to verify your identity before actioning any request in order to protect against unauthorised disclosure or deletion.

In certain circumstances we may be legally required or otherwise entitled to retain data even after a deletion request. In such cases, we will restrict processing of that data to the retention purpose only and delete it once that purpose has been fulfilled.

Throughout the retention period, we store data securely and apply appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, loss, or destruction.

Access to retained data is limited to personnel and authorised processors who require it to perform their duties.

When data reaches the end of its retention period or is subject to an approved deletion request, we dispose of it securely so that it cannot be reconstructed or recovered.

Disposal methods vary depending on the format of the data and the systems in which it is held.

We may use trusted third-party service providers, such as email, hosting, analytics, and payment providers, to help us operate our business. Where these providers process data on our behalf, we require them to apply retention and disposal standards consistent with this Policy.

We take reasonable steps to ensure that such providers have appropriate data protection safeguards in place and delete data when it is no longer required.

We will review this Policy periodically and update it as necessary to reflect changes in our business practices, technology, or legal requirements. Material changes will be published on this page with a revised effective date.

This document is a template intended for review by a qualified legal adviser in [JURISDICTION] before publication. Placeholder values must be confirmed and finalised prior to launch.

If you have any questions about this Data Retention Policy, wish to exercise your data rights, or would like to request deletion of your data, please contact us using the details below.