Retention period by category
The periods below are maximum periods. Data is deleted earlier when it is no longer needed or when a valid privacy request requires earlier deletion.
| Data class | Target | Action and reason |
|---|---|---|
| Website events, visitors, campaign pages, test variants and chatbot conversations | 180 days | Delete when no longer needed to assess website use and answer quality. |
| Consent choices | 730 days | Keep the choice and corresponding version so they can be demonstrated, then delete. |
| Enquiries, links between a visit and an enquiry and links to a trial or customer | 730 days | Keep for the business relationship and privacy requests unless earlier deletion is required. |
| Information about privacy requests | 730 days | Keep the steps that were performed, without unnecessary original data. |
| Information about completed deletions | 1,095 days | Keep a limited control record without identifying data, then delete. |
Deletion and rights
The public privacy form accepts access, correction, deletion and restriction requests. An authorised staff member verifies identity, records the request and its outcome and processes only the relevant website data. A request made through the public website does not provide access to customer or employee product data.
If a business relationship or statutory obligation requires a different period, crewQI must record the reason, update the retention policy and review the public notice before changing the period.