Data Retention Policy

Last updated: July 28, 2024

This Data Retention Policy describes how Arvoden Slik collects, stores, and deletes personal and operational data generated through the use of our platform and services. By using our services, you acknowledge that your data will be handled in accordance with this policy.

---

1. Purpose and Scope

This policy applies to all data processed by Arvoden Slik in connection with the operation of its online education and webinar platform, including data submitted by registered users, session participants, and visitors to arvodenslik.com. It governs how long we retain different categories of data and the procedures we follow when data is no longer needed.

The purpose of retaining data is limited to the following legitimate operational needs: providing and improving our services, fulfilling contractual obligations, maintaining security and preventing fraud, resolving disputes, and complying with applicable legal requirements.

---

2. Categories of Data We Retain

2.1 Account and Registration Data

This includes information provided during account creation such as name, email address, password credentials, and profile details. Account data is retained for the duration of the active account relationship and for a period following account closure as described in Section 4.

2.2 Usage and Activity Data

This includes records of sessions attended, course progress, interaction logs, feature usage patterns, and platform engagement metrics. Such data helps us maintain service quality and improve the user experience.

2.3 Communication Data

This includes messages sent through in-platform communication tools, support requests submitted via email or contact forms, and responses issued by our team. Communication records are retained to provide continuity of support and to resolve any disputes that may arise.

2.4 Technical and Device Data

This includes IP addresses, browser type, device identifiers, access timestamps, and error logs collected automatically when users interact with our platform. This data is used for security monitoring, debugging, and service reliability purposes.

2.5 Payment and Transaction Data

Where applicable, records of transactions, subscription status, and billing history are retained for financial reporting and dispute resolution. Full payment card details are not stored directly by us and are handled by certified third-party processors.

2.6 Webinar and Session Recordings

Live sessions may be recorded where consent has been obtained or where recordings are part of the service offering. Recordings are retained for a defined period and made available to eligible participants before being deleted or archived.

---

3. Retention Periods

We apply retention periods based on the category and purpose of the data. The table below outlines our standard retention schedule.

Data Category	Retention Period	Basis for Retention
Account and registration data	Duration of account plus 2 years after closure	Contractual obligation, legitimate interest
Usage and activity data	24 months from the date of activity	Service improvement, legitimate interest
Communication and support data	3 years from the date of last interaction	Dispute resolution, legitimate interest
Technical and device logs	12 months from collection	Security, operational integrity
Payment and transaction records	7 years from transaction date	Financial compliance requirements
Session recordings	6 months from session date unless extended	Contractual service delivery
Marketing preferences and consent	Until withdrawn, then 1 year for audit purposes	Consent management

Retention periods may be extended where data is required in connection with an active legal claim, regulatory investigation, or unresolved dispute. In such cases, data will be retained until the matter is fully resolved.

---

4. Account Closure and Data Deletion

4.1 Voluntary Account Closure

When a user requests account deletion or closes their account, we initiate a structured deletion process. Active account data is flagged for removal, and personal identifiers are deleted within 60 days of the closure request, subject to the retention periods described in Section 3.

4.2 Inactive Accounts

Accounts that have shown no activity for a continuous period of 36 months are considered inactive. We will notify the registered email address prior to initiating any deletion procedures. If no response or activity is recorded within 30 days of notification, the account and associated data may be deleted.

4.3 Data Held Beyond Closure

Certain data may be retained beyond account closure where required for legal compliance, financial record-keeping, or dispute resolution. Such data is held in restricted form and is not used for any operational or marketing purpose.

---

5. Data Minimization and Storage Standards

We apply data minimization principles throughout our collection and retention practices. Data is only collected to the extent necessary for a defined purpose and is not retained beyond that purpose. Where data can be anonymized or aggregated without loss of operational value, we prefer this approach over retention of identifiable records.

All retained data is stored using industry-standard security controls including encryption at rest and in transit, access controls limited to authorized personnel, and regular audits of data stores to ensure compliance with this policy.

---

6. Third-Party Processors and Data Sharing

We may share data with third-party service providers who process data on our behalf, including payment processors, cloud infrastructure providers, and analytics partners. These parties are required to adhere to data retention standards consistent with this policy. We do not sell personal data to third parties.

Where data is transferred to or processed by third parties, contractual data processing agreements are in place to ensure appropriate handling and timely deletion when retention periods expire.

---

7. User Rights Regarding Retained Data

Users have the right to request information about what data we hold, to request correction of inaccurate data, and to request deletion of data where no legal basis for retention exists. Requests can be submitted by contacting us at help@arvodenslik.com.

We will respond to all valid requests within 30 days. Where a request cannot be fulfilled due to a legal or contractual obligation to retain the data, we will provide a clear explanation of the basis for continued retention.

---

8. Automated Deletion Procedures

Where technically feasible, deletion of data at the end of its retention period is performed through automated processes. These processes are reviewed periodically to ensure accuracy and completeness. Automated deletion schedules are documented internally and subject to audit.

In cases where manual deletion is required, responsible personnel are designated and deletion is logged for accountability purposes.

---

9. Backup and Archival Data

Data held in backup systems may persist beyond the primary retention period due to the nature of backup rotation cycles. Backup data is subject to the same access controls as live data and is not used for any purpose other than disaster recovery. Backup retention cycles typically do not exceed 90 days from the time data is removed from active systems.

---

10. Policy Review and Updates

This policy is reviewed at least once per year and updated to reflect changes in our services, applicable legal requirements, or industry best practices. When material changes are made, registered users will be notified via the email address associated with their account or through a notice posted on our platform.

Continued use of our services following notification of changes constitutes acceptance of the updated policy.

---

11. Contact Information

If you have questions about this Data Retention Policy or wish to exercise any of your rights in relation to your personal data, please contact us using the details below.