Data Retention Policy

1. Purpose

This Data Retention Policy explains how LangaPress manages the retention of personal data and business records. It applies to data collected through our website, customer accounts, purchases, and business operations.

2. Retention Principles

LangaPress retains personal data and business records only as long as necessary for the purposes for which they were collected, and for the applicable statutory period where legal obligations require retention. Where specific retention periods have not been professionally verified, we use cautious wording such as "retained for the applicable statutory period" or "retained only as long as reasonably necessary."

3. Customer Accounts

Customer account data is retained for as long as the account is active. Inactive accounts may be retained for a reasonable period to allow for reactivation, after which non-essential personal data may be deleted, subject to legal retention obligations.

4. Orders and Payments

Order and payment records are retained for the applicable statutory period required for tax and accounting purposes under Dutch law. This typically means retention for the period required by the Dutch tax authorities.

5. Invoices

Invoices are retained for the applicable statutory period required for tax and accounting purposes. Invoice data is preserved even if a customer account is deleted, where legal obligations require retention.

6. Refunds

Refund records are retained for the applicable statutory period alongside the original order and payment records.

7. Settlements

Payment settlement records are retained for the applicable statutory period required for financial reconciliation and tax compliance.

8. Entitlements and Library Data

Product entitlements and library access records are retained for as long as the customer has access to the purchased product. Download history is retained for a reasonable period for security and support purposes.

9. Support Records

Support tickets, contact enquiries, and correspondence are retained for a reasonable period after resolution to support quality assurance and dispute resolution.

10. Marketing and Analytics

Marketing consent records are retained for as long as consent is active, plus a reasonable period to demonstrate consent management. Analytics data is retained for a reasonable period to support service improvement, subject to anonymisation where appropriate.

11. Affiliate Records

Affiliate programme records, including attribution data, commission calculations, and payout records, are retained for the applicable statutory period required for tax and accounting purposes.

12. B2B Records

B2B agreement records, seat assignments, and learner access data are retained for the term of the agreement plus the applicable statutory period for tax and accounting purposes.

13. Audit and Security Logs

Audit and security logs are retained for a reasonable period to support security monitoring, incident investigation, and compliance verification.

14. Incidents

Incident records, including personal data breach documentation where applicable, are retained for the applicable statutory period required under data protection law.

15. Internal Retention Rules

Detailed internal retention rules are maintained separately from this public policy in our internal Data Retention Rule register. The internal register is subject to ongoing professional review and is not published publicly.

16. Deletion and Anonymisation

Where retention periods expire and no legal obligation requires further retention, personal data is deleted or anonymised. Where deletion is not technically feasible, data is effectively restricted from further processing.

17. Contact

For questions about data retention, contact CasperLafeber@langapress.com.

Retention Holds and Deletion Limits

Deletion may be paused where information is reasonably required for a legal claim, fraud investigation, security incident, tax obligation or binding preservation request. Access remains restricted to the relevant purpose.

Backups and Derived Data

Deleted data may remain temporarily in protected backups until the backup cycle expires. Anonymised information that can no longer reasonably identify a person may be retained for analytics and service improvement.