Data Retention Policy
Last Updated: January 2, 2024
This Data Retention Policy describes how Slowcookerjournal collects, stores, and deletes personal and operational data. It applies to all users, visitors, and participants who interact with our platform at slowcookerjournal.com. By using our services, you acknowledge the practices described in this policy.
1. Purpose
We retain data only for as long as necessary to fulfill the purposes for which it was collected, to comply with applicable legal obligations, to resolve disputes, and to enforce our agreements. This policy establishes clear standards for how long different categories of data are kept and the procedures followed when data is no longer needed.
2. Scope
This policy applies to all personal data and operational data processed by Slowcookerjournal, including data collected through our website, registration forms, payment systems, communication channels, and any third-party integrations used in connection with our services.
3. Categories of Data and Retention Periods
The following table outlines the primary categories of data we process and the standard retention period for each category.
| Data Category | Examples | Retention Period | Basis for Retention |
|---|---|---|---|
| Account Information | Name, email address, username, password hash | Duration of account plus 2 years after closure | Contractual obligation, legitimate interest |
| Payment and Billing Records | Transaction IDs, billing address, payment method type | 7 years from transaction date | Legal and financial compliance |
| Participation and Activity Logs | Seminar attendance, session progress, quiz results | 3 years from last activity | Service delivery, legitimate interest |
| Communication Records | Support tickets, email correspondence, feedback forms | 3 years from last communication | Legitimate interest, dispute resolution |
| Technical and Usage Data | IP addresses, browser type, access timestamps, error logs | 12 months from collection | Security, platform performance |
| Marketing Preferences | Subscription status, opt-in records, consent timestamps | Until withdrawal of consent plus 1 year | Consent, legal compliance |
| Cookies and Tracking Data | Session cookies, analytics identifiers | As defined in our Cookie Policy, typically 30 days to 13 months | Consent, legitimate interest |
| User-Generated Content | Discussion posts, comments, uploaded materials | Duration of account plus 1 year after closure | Service delivery, legitimate interest |
4. Retention Principles
4.1 Minimum Necessary Retention
We do not retain data beyond the period required to fulfill the stated purpose. When data is no longer needed, it is either securely deleted or anonymized so that it can no longer be associated with any individual.
4.2 Legal Hold
In circumstances involving ongoing legal proceedings, regulatory investigations, or formal disputes, data relevant to those matters may be retained beyond the standard retention period until the matter is fully resolved.
4.3 Anonymization as an Alternative to Deletion
Where complete deletion is not technically feasible or where aggregated data serves a legitimate analytical purpose, we may anonymize personal data in a manner that makes re-identification impossible. Anonymized data is not subject to this policy's retention limits.
4.4 Backup Systems
Data deleted from active systems may temporarily remain in encrypted backup archives. Such backup data is subject to scheduled purge cycles and is not used for any operational purpose. Backup retention does not extend beyond 90 days following the scheduled deletion date.
5. Data Deletion Procedures
5.1 Automated Deletion
Where technically feasible, deletion processes are automated and triggered upon the expiry of the applicable retention period. Automated routines run on a scheduled basis and are logged for audit purposes.
5.2 Manual Review
Certain data categories require manual review before deletion, particularly where data may be subject to legal hold or where deletion could affect the integrity of related records. Designated staff are responsible for conducting and documenting these reviews.
5.3 Third-Party Data Processors
Where personal data is shared with or processed by third-party service providers on our behalf, we require those providers to maintain retention and deletion standards consistent with this policy. Contracts with processors include provisions governing data retention and timely deletion.
6. User Rights Regarding Retained Data
Users may exercise the following rights in connection with data we hold about them:
Right of Access: You may request a copy of the personal data we hold about you and information about how it is used and retained.
Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal obligations and legitimate interests that require continued retention.
Right to Rectification: You may request correction of inaccurate or incomplete data we hold about you.
Right to Restriction: You may request that we restrict the processing of your data in certain circumstances, such as while a dispute regarding accuracy is being resolved.
Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a structured, machine-readable format.
To exercise any of these rights, please contact us using the details provided in Section 9 of this policy. We will respond to verified requests within 30 days.
7. Account Closure and Data Handling
When a user closes their account or requests account deletion, the following process applies:
Active account data is marked for deletion and removed from live systems within 30 days of the closure request. Certain data, including billing records and legally required logs, will be retained for the periods specified in Section 3 above, even following account closure. User-generated content that has been shared publicly or within group sessions may be retained in anonymized or aggregated form to preserve the integrity of shared learning records.
8. Security of Retained Data
All data retained under this policy is protected by appropriate technical and organizational security measures. These include encryption at rest and in transit, access controls limiting data access to authorized personnel, audit logging of access to sensitive records, and regular security assessments of data storage systems. The level of protection applied is proportionate to the sensitivity of the data and the risks associated with its retention.
9. Contact Information
If you have questions about this Data Retention Policy, wish to exercise your data rights, or have concerns about how your data is being retained, please contact us:
Slowcookerjournal
5725 Dragon Way, Cincinnati, OH 45227, United States
Email: info@slowcookerjournal.com
Phone: +1 607 743 1507
Website: slowcookerjournal.com
10. Changes to This Policy
We may update this Data Retention Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will update the date at the top of this document and, where appropriate, notify users through our platform or by email. Continued use of our services following notification of changes constitutes acceptance of the revised policy. We encourage you to review this policy periodically to stay informed about how we manage retained data.