Retention and Store Deletion Policy

1. General Principles

Personal data is retained only for as long as necessary for its purpose. Retention considers service requirements, data minimization, security needs, contractual duties, limitation periods, and binding law. At the end of the period, data is deleted, destroyed, or anonymized.

2. Installation and Identity Data

Shopify store-installation and staff-identity records remain while the installation is active. On uninstall, the access token is revoked; after Shopify's verified shop-redaction webhook or an authorized deletion request, related Store data is deleted within applicable deadlines.

3. Selections and Customer Fields

Product, price, image, and selection records remain while the Store uses the service and the selection is valid. An optional customer name or note in an expired selection is automatically and permanently purged 30 days after expiry. Other selection content remains subject to the Store's account and deletion instructions.

4. Security, Communications, and Legal Records

Security and abuse records are retained for up to 90 days; short-lived request-deduplication and pseudonymous abuse-prevention identifiers normally for 14 days. Business-contact requests are retained for 12 months after the last meaningful contact. Evidence of terms acceptance and notice delivery is retained for ten years after the legal relationship ends.

5. Deletion Request Process

Deletion requests may be sent to info@intsell.co.uk or delivered through Shopify's mandatory privacy webhooks. A request should identify the Shopify store domain and scope. Intsell verifies store authority and begins deletion of linked Store, staff-identity, and selection records.

The requester is informed when deletion is complete or where a legal ground requires partial refusal. Copies in provider backups are overwritten in the ordinary backup cycle and are not used for another purpose unless restored to the active system.

6. Legal Holds and Exceptions

Where a legal dispute, valid authority request, or binding retention duty applies, only relevant records may be placed on a reasoned and time-limited legal hold. General, indefinite holds are not used; ordinary deletion resumes when the reason ends.