Data Retention Policy
Olive Branch Design Ltd · Effective from 2026
1. Purpose
This policy explains how long we keep personal data and why, in accordance with UK GDPR and the Data Protection Act 2018.
2. Retention Schedule
Client Project Files
Retention: 6 years
Reason: Contract and legal obligations.
Website Form Submissions
Retention: 2 years
Reason: Customer service and enquiry management.
Newsletter Sign-Ups
Retention: Until unsubscribed + 2 years
Reason: PECR compliance.
Blog Subscriptions
Retention: Until unsubscribed.
Comments
Retention: 2 years.
Stripe Payment Data
Retention: 6 years
Reason: Tax and accounting obligations.
Analytics & Cookie Data
Analytics data: 1–24 months
Advertising data: 1–24 months
Consent logs: 2 years
Social Media Messages
Retention: 1 year.
Email Communications
Retention: 2 years.
Portfolio & Case Studies
Retention: Indefinite unless removal is requested.
Business Records
Retention: 6 years.
3. Secure Deletion
We delete or anonymise data when retention periods expire using one or more of the following methods:
- Permanent deletion from systems
- Clearing logs
- Removing files
- Deleting cloud storage items
4. Your Rights
You may request deletion, access, correction, or restriction of your data at any time. Contact: admin@tomattwood.me
5. Review
This policy is reviewed annually or whenever our systems or applicable laws change.