Data Retention Policy

This policy explains how long WebDoneNow retains different types of data, and how you can request earlier deletion.

1. Retention Periods

Data type	Retention period	Reason
Client project data	Duration of client relationship + 6 years	Accounting and tax compliance (UK HMRC requires 6 years)
Payment records	6 years from transaction date	Financial record-keeping requirements
Lead generation data	24 months from last contact, or until opt-out (whichever is sooner)	Legitimate interest for B2B marketing under UK GDPR / CAN-SPAM
Contact form submissions	12 months	Query resolution and follow-up
Website analytics	12 months	Site improvement and performance monitoring
Email correspondence	Duration of client relationship + 2 years	Project reference and dispute resolution
Unsubscribe requests	Indefinitely (suppression list)	To ensure we do not contact individuals who have opted out

2. What Counts as "Client Project Data"

Business name, trade, and service area
Contact details (name, email, phone)
Content provided for your website (photos, text, branding)
Domain registrar details and access logs
Project correspondence and revision requests

3. What Counts as "Lead Generation Data"

Business name and trade (from public directories)
Phone number and email address (from public listings)
Website status (has website / no website)
Source of the data (e.g. Google Maps, BBB, Outscraper)

4. Requesting Earlier Deletion

You can request earlier deletion of your data at any time by emailing dakota.vale@webdonenow.com with "Data Deletion Request" in the subject line.

We will respond within 30 days. Some data may need to be retained for legal or accounting reasons even after a deletion request — we will tell you if this applies.

5. What Happens After Retention Expires

Lead generation data is permanently deleted from our databases and suppression lists are checked
Client project data is archived or deleted (unless required for ongoing tax/legal compliance)
Analytics data is aggregated or deleted
Email correspondence is securely deleted

6. Data Minimisation

We only collect data that is necessary for providing our services, processing payments, and conducting legitimate B2B marketing. We do not collect sensitive personal data (health, religion, political views, etc.) and have no need to do so.

7. Contact

For data retention questions or deletion requests: dakota.vale@webdonenow.com

This Data Retention Policy is provided as a starting point and should be reviewed by a legal professional before relying on it for regulatory compliance.