Data Retention Policy

1. Overview

This policy defines how long Efficient Legal retains different categories of data and the processes by which data is deleted. Our default position is to retain only what is necessary for legitimate business, legal, and operational purposes.

2. Client Engagement Data

Project documentation, statements of work, and correspondence related to client engagements are retained for 7 years from engagement completion to meet standard business record-keeping requirements. After this period, records are securely deleted.

3. Migration Interim Files

Intermediate data files created during migration, including exports, transformation scripts, and validation reports, are retained for 30 days following Client sign-off on the completed migration. Clients may request retention for up to 90 days for verification purposes.

4. Website and Application Logs

Web server access logs are retained for 90 days for security monitoring and troubleshooting. Application error logs are retained for 30 days. Anonymized analytics data (page views, session duration) is retained for 24 months.

5. Contact and Inquiry Data

Information submitted through contact forms or assessment requests is retained for 3 years from the date of last contact. If no engagement follows initial contact, data is deleted after 12 months.

6. Deletion Requests

Clients and individuals may request deletion of their data at any time by contacting privacy@efficient.legal. Requests are fulfilled within 30 days, subject to any legal holds or retention obligations that supersede the request. We confirm deletion in writing.

7. Secure Deletion Methods

Physical media containing client data is destroyed using industry-standard methods. Digital data is deleted using secure overwrite procedures appropriate to the storage medium. Cloud-hosted data is deleted via provider APIs that comply with recognised deletion standards.