This policy outlines how long we retain your data, why we keep it, and how we securely dispose of it when no longer needed.
At iDecide, we are committed to responsible data management and privacy protection. This Data Retention Policy outlines how long we retain your personal data, the reasons for retention, and our secure disposal procedures.
This policy applies to all personal data collected and processed by iDecide through our platform, services, and interactions with users. We retain data only as long as necessary to provide our services, comply with legal obligations, and protect our legitimate business interests.
Our retention practices are designed to balance user privacy with business needs, ensuring we maintain data security while respecting your rights to data deletion and portability.
Our data retention practices are guided by the following principles:
We collect and retain only the data necessary for our legitimate business purposes and service provision.
Data is retained only for the specific purposes for which it was collected and processed.
Retention periods comply with applicable legal and regulatory requirements.
Data is securely and permanently deleted when retention periods expire.
We classify data into different categories based on sensitivity and purpose:
Requires the highest level of protection and specific retention periods:
Standard personal data requiring careful handling:
Platform usage and technical information:
Specific retention periods apply to different types of data:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information | Active account + 7 years | Service provision, legal compliance |
| Legal Documents | As specified by user or indefinitely | Legacy planning, user preference |
| Financial Records | 7 years after last update | Tax compliance, audit requirements |
| Medical Information | As required by healthcare laws | Healthcare compliance |
| Usage Analytics | 2 years | Service improvement, fraud prevention |
| Support Communications | 3 years | Quality assurance, dispute resolution |
| Payment Information | 7 years | Financial record keeping, tax compliance |
| Marketing Data | Until consent withdrawn | Marketing communications (with consent) |
Our retention periods are determined by various legal and regulatory requirements, including:
When data reaches the end of its retention period, we follow secure disposal procedures to ensure complete and irreversible deletion:
You have several rights regarding the retention and deletion of your personal data:
You can request deletion of your personal data, subject to legal and contractual obligations. We will honor deletion requests unless we have a legitimate reason to retain the data.
You can request a copy of your data in a portable format before deletion or when switching services.
You can request information about how long specific types of your data will be retained and the reasons for retention.
You can object to certain types of data processing, which may affect retention periods and our ability to provide certain services.
Important: Some data may need to be retained despite deletion requests due to legal obligations, ongoing legal proceedings, or legitimate business interests. We will inform you if this applies to your request.
In certain circumstances, we may need to retain data beyond normal retention periods:
Data subject to litigation, investigations, or regulatory requests will be preserved until the matter is resolved.
Data related to security incidents or fraud investigations may be retained longer for protective purposes.
Important documents designated by users for long-term preservation (such as wills or legal documents) may be retained indefinitely.
Data in backup systems may persist beyond primary deletion until the next backup cycle completion.
We regularly monitor and review our data retention practices to ensure compliance and effectiveness:
If you have questions about our data retention practices or wish to exercise your rights regarding data retention:
Data Protection Team: compliance@idecide.co
Business Hours: Monday-Friday, 9:00 AM - 5:00 PM AEST
Response Time: We will respond to requests within 30 days
For urgent data retention matters or if you believe your data is being retained inappropriately, please mark your inquiry as "URGENT - Data Retention" in the subject line.
iDecide Data Retention Policy - Version 1.0
Last Updated: 30 June 2025
Effective Date: 30 June 2025