Draft for review — placeholder copy, not yet legally approved.
Retention
How long we keep data.
We retain personal data only for as long as necessary for the purpose it was collected, or as required by law.
Last updated · May 2026
Retention periods
| Data | Retention |
|---|---|
| Active account & CPD records | Retained for the life of the account. |
| Closed accounts | Deleted within 30 days of closure, except where retention is legally required. |
| Uploaded evidence files | Deleted with the parent CPD record. |
| Security & access logs | Up to 12 months. |
| Billing records | 6 years (UK statutory requirement). |
| Backups | Rolling 35-day window; data in backups is overwritten on schedule. |
Deletion requests
You can request deletion via our data requests page.