Data Retention Policy
Effective Date: 15 July 2026
1. Overview
Droblet Ltd. ("Droblet", "we", "our", or "us") retains personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, and support legitimate business needs. This policy sets out our data retention periods and deletion practices.
2. Retention Periods by Data Category
Customs & Trade Data
Retained for up to 7 years, or longer where required by applicable EU or UK customs regulations and regulatory obligations.
Account & Profile Data
Retained for the duration of your active account, plus 3 years following account closure unless otherwise required by law.
Financial & Billing Records
Retained for 7 years in compliance with UK and EU financial record-keeping requirements.
Technical & Usage Logs
Retained for up to 12 months for security monitoring, debugging, and service improvement purposes.
Marketing & Communication Data
Retained until you withdraw consent or unsubscribe. Suppression lists are maintained indefinitely to honour opt-out requests.
3. Legal Basis for Retention
We retain data based on the following legal grounds:
- Legal obligation — to comply with EU and UK customs, tax, and data protection laws
- Contract performance — to deliver our services and support ongoing client relationships
- Legitimate interest — for security monitoring, fraud prevention, and dispute resolution
- Consent — where you have explicitly agreed to a specific use or retention period
4. Deletion Practices
When data is no longer required, we securely delete or anonymise it using industry-standard methods. Our deletion process includes:
- Secure overwriting of stored files and database records
- Anonymisation where deletion is not technically feasible
- Removal from all backup systems within 90 days of the standard deletion cycle
5. Your Rights
Under GDPR and UK GDPR, you have the right to request erasure of your personal data. Where a legal obligation requires us to retain data, we will inform you of the applicable retention period. To exercise your rights, contact us at privacy@droblet.ai.
6. Contact
Data Protection Contact: privacy@droblet.ai
Company: Droblet Ltd.
You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with data protection laws.