logo

Data Retention Policy

DocumentLocation StoredRecord OwnerFormatRetention PeriodBasis for Retention
Supplier Information7 Years
Client Information7 years
Customer Information7 years
Legal contracts6 years for contracts that are not executed by deed and 12 years for contracts that are executed by deed. You are not legally obliged to keep them this long but you should keep them for the aforementioned limitation periods (ie the time in which someone can bring a claim against you) as you could be penalised by the court if you can’t produce relevant documents
Audited financial statements, tax returns and assessments and banking records6 years
Records establishing client’s identity for money laundering purposes5 years
Employment Records
Job applications and interview records of unsuccessful candidatesA short period, 6 months after notifying unsuccessful candidates (or longer, if there is a clearly communicated policy to keep candidates CVs for future reference). Application forms should give applicants the opportunity to object to their details being retained
Personnel and training recordsWhile employment continues and up to six years after employment ceases
Written particulars of employment, contracts of employment, and changes to terms and conditionsWhile employment continues and up to six years after employment ceases
Working time opt-out formsTwo years from the date on which they were entered into
Annual leave recordsSix years or possibly longer if leave can be carried over from year to year
Payroll and wage records for unincorporated businesses eg sole traders and partnershipsFive years after 31 January following the year of assessment
Payroll and wage records for companiesSix years from the financial year-end in which payments were made
PAYE recordsNot less than three years after the end of the tax year to which they relate
Maternity recordsThree years after the end of the tax year in which the maternity pay period ends
Sickness records required for the purposes of Statutory Sick PayThree years after the end of the tax year in which payments are made
Current bank details of employeesNo longer than necessary
Any reportable accident, death or injury in connection with workFor at least three years from the date the report was made
Consents for the processing of personal and sensitive dataFor as long as the data is being processed and up to 6 years afterwards
Disclosure and Barring Service (DBS), formerly Criminal Records Bureau (CRB), checks and disclosures of criminal records formsShould be deleted following recruitment process unless assessed as relevant to ongoing employment relationship. Once the conviction is spent, should be deleted unless it is an excluded profession
Immigration checksTwo years after the termination of employment
Company Information
Company formation documents such as Certificate of IncorporationPermanently
Register of membersPermanently
Minutes of directors’ meetings10 years from the date of the meeting (but records of meetings held before 1 October 2007 should be kept indefinitely)
Copies of shareholder resolutions and minutes of shareholder meetings10 years from the date of the resolution or the meeting (but resolutions or meetings held before 1 October 2007 should be kept indefinitely)