Last updated: November 27, 2025

Data Retention Policy

This Data Retention Policy describes how long Visoniq TechCore retains different categories of personal data and the safeguards we apply throughout each lifecycle stage. We provide technical GDPR implementation only and do not offer legal advice. For legal guidance, consult qualified counsel.

Retention Schedule

Analytics Data (Google Analytics 4 - consent-based only)

Retention: 14 months

Retention configured in GA4 admin controls. Data is pseudonymous and collected only after explicit user consent. Automatically deleted after the retention period.

Contact Form Submissions

Retention: 12 months

Stored in Google Workspace for client communication, quotes, and follow-up. Deleted sooner upon verified request. Access restricted to essential personnel.

Client Project Files & Deliverables

Retention: 90 days after project completion

Used for warranty fixes or clarification. Stored briefly in Google Workspace or secure local repositories. Deleted from primary systems after 90 days; backups overwritten as part of lifecycle rotation.

System & Security Logs (Cloudflare)

Retention: 30 days

Includes IP addresses, request logs, and threat detection metadata. Used for performance and security monitoring. Retention follows Cloudflare’s default log lifecycle.

Retention Principles

Collect only the minimum necessary data.
Review retention periods annually.
Restrict access to retained records.
Use secure deletion or anonymization.
Document deletion workflows.
Ensure subprocessors apply equivalent retention rules where possible.

Deletion Requests

Individuals may request access, correction, restriction, deletion, or portability by contacting contact@visoniq.com. We verify identity, respond within one calendar month, and perform irreversible deletion from primary systems and from backups where technically feasible.

Legal & Contractual Obligations

Some records may be retained longer for tax, accounting, fraud prevention, or security requirements. In these cases, we document justification, restrict access, and delete the data once obligations expire.