Data retention policy
Avocado Toast will determine how long data is required and define the time periods for which personal data records should be retained, deleted or archived within the Retention Schedule of this document. If a category of personal data is not specified within this policy, the retention period will be deemed to be 3 years from the date of creation or acquisition. Avocado Toast will annually review the data we hold and update the Retention Schedule as appropriate.
Data archiving and removal policy
Under GDPR, we can process personal data for archiving purposes beyond the stated retention period if doing so is in the public interest, or for historical, scientific or statistical purposes. We ensure that archiving does not contravene the rights and freedoms of data subjects and that appropriate technical and organizational safeguards are in place, such as data minimization or encryption.
Data storage policy
Avocado Toast follows the document retention procedures outlined below. Documents that are not listed, but are substantially similar to those listed in the schedule will be retained for the appropriate length of time.
App/service has sub-processors