Data Retention and Deletion Policy

Retention periods

• Account data: while the account is active, then 2 years
• Financial and donation records: 6 years, as required for audit and tax
• Identity documents: until verification ends plus 5 years for fraud and AML checks
• Safeguarding records: as long as legally required
• Marketing preferences: until you change them

Deletion

Ask for deletion through Contact. We confirm within 30 days, unless the law requires us to keep the data.

Backups

Encrypted backups roll over and are erased on their normal schedule.