Data Retention & Deletion Policy
This Data Retention and Deletion Policy explains how long data is retained by this Model Trains website and how such data is securely deleted when no longer required.
1. Purpose
The purpose of this policy is to:
- Ensure personal and website data is retained only for legitimate purposes
- Minimize data storage risks
- Comply with applicable Indian data protection laws
- Support good IT governance and security practices
2. Scope
This policy applies to:
- Personal data collected from website visitors
- User communications and submissions
- Website logs and technical data
- Data stored by third-party service providers on behalf of the website
3. Types of Data Collected
The website may collect and retain the following types of data:
3.1 Personal Data
- Name and email address (contact forms, newsletters)
- Communication records (emails sent to the website)
3.2 Technical Data
- IP address
- Browser and device information
- Access logs and analytics data
3.3 Content Data (If Applicable)
- Comments, feedback, or user-submitted content
4. Data Retention Principles
Data is retained based on the following principles:
- Purpose limitation: Data is kept only for the purpose it was collected
- Data minimization: Only necessary data is retained
- Storage limitation: Data is deleted once no longer required
- Legal compliance: Retention aligns with Indian legal requirements
5. Retention Periods
| Data Category | Retention Period |
|---|---|
| Contact form enquiries | Up to 12 months |
| Newsletter subscription data | Until user unsubscribes |
| User emails / correspondence | Up to 24 months |
| Website logs | 3 to 6 months |
| Analytics data | Aggregated / anonymized, as per provider policy |
| User-generated content | Until removed by user or administrator |
Retention periods may be extended if required for legal or security reasons.
6. Data Deletion & Disposal
6.1 Deletion Methods
Data is deleted using reasonable and secure methods, including:
- Permanent deletion from databases
- Removal from email systems
- Secure deletion of backups over time
6.2 Backup Data
- Backups are retained for a limited period
- Deleted data may remain in backups until the next backup cycle, after which it is permanently removed
7. User Rights & Data Deletion Requests
Under the Digital Personal Data Protection Act, 2023, users may request:
- Access to their personal data
- Correction of inaccurate data
- Deletion of personal data, subject to legal obligations
Requests will be acknowledged within 48 hours and acted upon within a reasonable timeframe.
8. Third-Party Data Retention
Third-party service providers (such as hosting or analytics services) may retain data in accordance with their own retention policies. We ensure such providers maintain reasonable data protection standards.
9. Exceptions
Data may be retained beyond standard periods if:
- Required by law or regulatory authorities
- Necessary for security investigation or dispute resolution
- Required to protect legal rights
10. Security Measures
Reasonable technical and organizational safeguards are implemented to protect retained data against unauthorized access, alteration, or loss.
11. Policy Review & Updates
This policy will be reviewed periodically and updated to reflect:
- Changes in legal requirements
- Changes in website functionality
- Improvements in data management practices
12. Contact Information
For questions related to data retention or deletion:
Website Administrator
Email: info@bnmodeltrains.com
We retain personal data only as long as necessary and securely delete it when no longer required.