We keep personal data only as long as we need it for the purpose we collected it, or as long as the law requires. This page lists how long we keep each kind of data and what happens at the end of that period.
Retention periods
| Data | Details | Kept for | What happens |
|---|---|---|---|
| Help requests | Requests sent through the "Get help" forms. After this period with no activity, the email, note and free-text fields are removed and the request is kept only as anonymous statistics. | 2 years | Anonymised automatically |
| Provider interest submissions | Expressions of interest from prospective providers. After this period with no activity, name, email, company, website and note are removed. | 2 years | Anonymised automatically |
| IP evidence in consent records | A keyed hash of the IP address stored with each consent choice as evidence. The hash is removed after this period; the choice itself is kept. | 1 year | Removed automatically |
| Superseded consent records | Consent choices that were later replaced by a newer choice for the same purpose, kept as proof and then deleted after this period. | 3 years | Deleted automatically |
| Cookie choices from anonymous visitors | Cookie choices recorded against an anonymous visitor ID. The cookie itself lasts 12 months; the record is deleted after this period. | 4 years | Deleted automatically |
| Completed privacy requests | Privacy requests that have been completed or rejected, kept to show how each was handled. | 2 years | Deleted automatically |
| Unverified privacy requests | Privacy requests whose email address was never confirmed. | 30 days | Deleted automatically |
| Admin sign-in attempts | Records of staff sign-in attempts (including IP address) used to block password guessing. | 90 days | Deleted automatically |
| Deleted accounts | When you delete your account it is kept for this period so you can change your mind by signing in. After that your account, saved plans and sign-in details are deleted and your enquiries are anonymised. | 14 days | Deleted automatically |
| Rejected provider verification documents | Documents uploaded by a provider whose application was finally rejected. | 90 days | Deleted or anonymised (reviewed) |
| Approved provider verification documents | Kept while the provider is active on Relomize and for this period after the relationship ends. | 1 year | Deleted or anonymised (reviewed) |
| Closed conversations, proposals and service records | Kept after closure for disputes, fraud prevention and business records, then deleted or anonymised. | 2 years | Deleted or anonymised (reviewed) |
| Product analytics events | Analytics events are deleted by our analytics provider after this period (configured in PostHog). | 1 year | Deleted or anonymised (reviewed) |
"Automatically" means a scheduled job deletes or anonymises the data every day. "Reviewed" means the period is applied through a documented manual process.
Accounts
If you have an account, we keep your plan and account data while your account is active. If you ask us to delete your account, we delete or anonymise your data. If you have used marketplace features, we may keep a pseudonymised record for as long as needed for disputes, fraud prevention or legal obligations.
Anonymised data
Anonymised data can no longer identify you, so we may keep it for statistics.
Backups
Deleted data may remain in encrypted backups for a short period until those backups are overwritten on their normal schedule.
Legal holds
We may keep data for longer if we have to for a legal claim, an investigation or a legal obligation, and only for as long as that lasts.
Version 1.0, effective 25 October 2026.