Data Retention Policy

 
 

DATA RETENTION POLICY

  1. Purpose: This Data Retention Policy ("Policy") outlines the principles governing the retention, storage, and deletion of data at Carell Solutions Pty Ltd ("Company") in compliance with Australian legal requirements and best practices.

  2. Scope: This Policy applies to all data held by Carell Solutions Pty Ltd, whether electronic, paper, or otherwise, and includes data stored on external or third-party systems.

  3. Data Retention Periods:

    a. Customer Data: Retained for 7 years following the closure of a customer account unless otherwise required for legal, regulatory, or contractual reasons.

    b. Employee Data: Retained for 7 years after the termination of employment.

    c. Financial Records: Retained for 7 years, in compliance with the Australian Taxation Office requirements.

    d. Operational Data: Retained for 3 years from the date of creation.

    e. Marketing Data: Retained for 5 years or until the data subject opts out or requests deletion.

    f. Telecommunication Data: For companies under the Telecommunications (Interception and Access) Act 1979, metadata must be retained for 2 years.

  4. Data Deletion:

    a. Upon the expiration of the retention period, the data will be securely deleted or anonymized, ensuring the data is irretrievable.

    b. Data slated for deletion will be purged from all of Carell Solutions Pty Ltd's repositories, including backups and third-party systems.

  5. Exceptions:

    a. In specific cases, such as a legal dispute or ongoing investigations, Carell Solutions Pty Ltd may need to retain data beyond its standard retention timeframe.

    b. Any deviations from the aforementioned retention durations will be thoroughly documented and justified.

  6. Data Subject Rights:

    a. Under the Australian Privacy Principles, individuals have the right to access their data, correct inaccuracies, and in some circumstances, request deletion.

    b. Requests from data subjects regarding their data will be addressed within a reasonable timeframe and in accordance with the Privacy Act 1988 (Cth).

  7. Policy Review:

    Regular reviews of this Policy will be conducted at least annually or whenever there are significant adjustments to data management practices or related legislation at Carell Solutions Pty Ltd.

  8. Contact:

    For inquiries or clarifications pertaining to this Data Retention Policy, please reach out to Carell Solutions Pty Ltd's Data Protection Officer/Responsible Person at [email protected]