FORMALPursuant to the obligations imposed upon the Company by applicable data protection legislation, including but not limited to the UK General Data Protection Regulation as retained in domestic law by the European Union (Withdrawal) Act 2018, Clarity Analytics Limited hereby sets forth its data retention policy, which governs the period for which personal data and platform usage data shall be retained following the cessation of a Subscriber's contractual relationship with the Company.
CASUALOK so basically we keep your data for a bit after you cancel, which is totally normal and honestly no big deal. We are not just hoarding it for fun though — there are legit legal reasons we have to hold onto stuff. No cap, we delete everything as soon as we legally can. Super transparent, very cool, we love a good data cleanse era.
FORMALNotwithstanding the foregoing, the Company shall retain transactional records and audit logs for a minimum period of six years from the date of the relevant transaction, in accordance with the requirements of the Companies Act 2006 and HM Revenue and Customs guidance on financial record keeping. Such records shall be maintained in a secure and access-controlled environment and shall not be used for any purpose other than compliance with the aforementioned statutory obligations.
CASUALHonestly the six-year thing is giving very much "accountant made us do it" energy and we totally get that it sounds like a lot. But like, your actual dashboard content and personal profile stuff? Gone way faster than that, bestie. We are talking 90 days after you peace out of the platform. That is it. We are not weird about it.
FORMALWith respect to data pertaining to the Subscriber's end users, which may constitute personal data within the meaning of Article 4(1) of the UK GDPR, the Subscriber acknowledges and agrees that it assumes the role of data controller in relation to such data, and that the Company acts solely as data processor in accordance with the written instructions of the Subscriber as set forth in the Data Processing Agreement, which forms an integral part of the Subscription Agreement entered into between the parties.
CASUALLook, if you are putting your own users' info into Clarity, that is on you legally speaking — we are just the tool you are using to store it, not the one calling the shots on what happens to it. Think of us like your really responsible friend who holds your stuff but does not go through it. Slay responsibly and make sure your privacy policy covers what you are doing, because that is a you problem not a us problem and we are being real with you rn.
FORMALSubscribers who wish to exercise their rights under Chapter III of the UK GDPR, including but not limited to the right of access, the right to rectification, the right to erasure, and the right to data portability, should submit a written request to the Company's designated Data Protection Officer at the contact details provided in the Privacy Notice. The Company shall respond to all valid requests within the statutory period of one calendar month, subject to extension in cases of complexity or volume as permitted by applicable law.
CASUALWant your data deleted? Just DM us basically — hit up our privacy team and we will sort it out. We have got a whole month to get back to you legally but honestly we are usually way faster than that. We are not the villain in your data story, pinky promise. Just reach out and we will make it happen, no drama. You have got rights and we respect that energy completely.