Arts Centre at Edge Hill University Data Retention Policy

This policy covers the retention of all customer information created and/or maintained by the Arts Centre at Edge Hill University.

The General Data Protection Regulation places more emphasis on being accountable for and transparent about your lawful basis for processing. Article 5 states that “personal data shall not be kept for longer than is necessary” and “every reasonable step must be taken to ensure that personal data is accurate and where necessary, kept up to date”.

Arts Centre at Edge Hill University Data

Record series	Minimum retention period	Action	Comments
Customer Accounts (name, email address, postal address, telephone number and card details)	5 years	Dispose (according to customer response)	Every 5 years customers will be asked if they would like to keep their account with us.
Student membership records	Student Lifecycle	Dispose	Student membership will expire upon graduation and membership data will be disposed.
Communications to customers	Date of issue + 2 years	Dispose
Records documenting event attendees and analysis of this data	Completion of event + 3 years	Dispose
Anonymised statistical records of event attendees	Completion of event + 3 years	Dispose