Store Policies
Data Retention Policy
How The Emporium Discount stores, protects, and manages customer data. At The Emporium Discount, we are committed to handling personal and transactional information responsibly. This Data Retention Policy explains how long we retain data, why it is retained, and how it is securely deleted when no longer required.
1. Purpose
This policy aims to:
- Comply with UK GDPR and the Data Protection Act 2018.
- Ensure personal information is retained only as long as necessary.
- Protect the privacy and security of customer information.
- Support legal obligations, customer service, and business operations.
2. Types of Data Retained
We may retain the following categories of information:
- Customer Account Information: Name, email address, phone number, billing and shipping details.
- Order & Transaction Records: Products purchased, invoices, payment records (excluding full card details), and order history.
- Customer Service Communications: Support requests, emails, inquiries, and complaint records.
- Website & Analytics Data: Usage information, cookies, and website performance statistics.
3. Retention Periods
| Data Type | Retention Period | Purpose |
|---|---|---|
| Customer Account Information | Up to 7 Years | Customer support, order history, compliance |
| Order & Transaction Records | Up to 7 Years | Accounting, warranties, legal obligations |
| Customer Service Records | Up to 5 Years | Complaint handling and support |
| Analytics Data | Up to 2 Years | Website improvement and performance monitoring |
| Cookies & Tracking Data | Varies | According to cookie settings and consent |
These periods are designed to comply with applicable UK accounting, tax, and consumer protection requirements.
4. Data Minimization
- We collect only information necessary to provide our services.
- Unnecessary personal information is deleted or anonymized when no longer required.
- Data collection practices are regularly reviewed to ensure compliance.
5. Secure Deletion
When retention periods expire:
- Electronic records are securely deleted using industry-standard procedures.
- Physical documents are securely destroyed where applicable.
- Third-party providers are required to delete or anonymize retained information.
6. Customer Rights
Under UK GDPR, customers may have the right to:
- Request access to personal information.
- Request correction of inaccurate data.
- Request deletion where legally permitted.
- Object to certain types of processing.
- Request information about how data is used.
Requests can be submitted using the contact details provided below.
7. Policy Updates
- This policy may be updated to reflect legal or operational changes.
- Updates will be published on this page.
- Customers are encouraged to review this policy periodically.