Data Retention & Deletion Schedule

Effective Date: When Published
Company: AH-RIN (Pty) Ltd

This Schedule explains how long we keep different categories of personal data and how we delete or anonymize them. It should be read with our Privacy & POPIA Policy.

1. General Principles

• We keep personal data only as long as necessary for lawful purposes.
• We apply POPIA’s purpose limitation and storage limitation principles.
• When data is no longer needed, we delete or irreversibly anonymize it.

2. Typical Retention Periods

• Order & billing records: kept for statutory accounting and tax periods (for example 5–7 years).
• Customer support communications: retained for a reasonable period to manage queries, disputes and training, then deleted or anonymized.
• Marketing preferences: kept until you unsubscribe or request deletion.
• Security logs: kept only as long as needed for fraud prevention and system integrity, then deleted or anonymized.

3. Deletion and Anonymization

Where we no longer need personal data, we will:

• delete it from active systems, and/or
• irreversibly anonymize it so it can no longer identify you.

4. Your Rights

You may request access, correction or deletion of personal data, subject to lawful exceptions. See our Privacy & POPIA Policy for more details.