Data retention policy
Records should be kept for as long as they are needed to meet the operational needs of the Additor, together with legal and regulatory requirements. We have assessed our records to ascertain business use and any legal or regulatory obligations. For certain records of a personal value to an individual, such as a certificate of achievement or award, we will retain them indefinitely.
Data archiving and removal policy
The disposal schedule lists collections or groups of records for which predetermined periods of retention have been ascertained. Records can be destroyed in the following ways:
- Non-sensitive information – can be placed in a normal rubbish bin
- Confidential information (including personal data belonging to members or candidates) – cross cut shredded and pulped or burnt.
- Electronic equipment or systems containing information - destroyed by IT and for individual folders/emails/database records, they will be permanently deleted from the system.
- Destruction of electronic records should render them non-recoverable even using forensic data recovery techniques.
Data storage policy
Data acquired in the core facilities will be stored on the Additor server in active, accessible storage for a year after acquisition. The IT team regularly backs up this data into Fortress, Additor's long term data archive. After a year, data will no longer be retained in active storage. Users who need data retrieved from the Fortress archive may be charged a fee. It is the users responsibility to move data from the Additor server to a personal storage site within the one year time frame.
App/service has sub-processors
no