We will only retain personal data for as long as strictly necessary to fulfil the purposes that it was collected including for the purposes of complying with any legal account, report requirements and when we assert or defend legal claims. By law we have to keep basic information about our customers and members, after they cease being our customers for six years. 

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

In some circumstances you can ask us to delete your data: see Your legal rights for further information.