Data Retention Policy

This policy sets out our obligations regarding the retention of user data that we collect, hold and process, in accordance with the General Data Protection Regulation (GDPR). It details the types of user data we hold, the periods for which that data is retained, and when and how it is to be deleted or otherwise disposed of.

Our Data Retention Policy was developed not only for safeguarding the rights of data subjects under GDPR, but also to ensure that we do not retain unnecessary or unessential data and that it is held securely.

Additionally, when the data held in accordance with our Data Protection Policy is destroyed, we will ensure that the data is destroyed securely.

The following detail outlines the specifics of our data retention relating to the specific data elements we record.

Search Logs

HooYu search logs are stored for the full period of the contracted term, upon the contract termination we retain the data for a further two years for audit purposes.

Searches performed on the Phonebook are stored for 6 years as per contract requirements with British Telecom for audit purposes.

Search log data is held securely and is only used in the event of a complaint being made about potential misuse of the service provided.

Account Information

Account information which includes users names, email addresses, encrypted passwords and data access permissions are stored for the full period of the contracted term, upon the contract termination we retain the data for a further two years for audit purposes.

Saved Graphs

Users saved graphs are stored the full period of the contracted term and are only retained for a further 3 months after contract termination. This data is held to allow for customers to keep their saved graph data should there be a delay to contract renewal.

The above policy applies to all HooYu Investigate user data held by us. For further information on other aspects of data protection and compliance with GDPR, please refer to our Data Protection Policy.

HooYu Ltd is registered under the UK Data Protection Act under registration number Z2501438.