Purpose: The purpose of this policy is to establish guidelines for retaining and deleting customer data in accordance with regulatory and business requirements.
Scope: This policy applies to all customer data stored in our Salesforce solution, including but not limited to contacts, accounts, and opportunity data. Excluded from this policy are customer data stored in external systems or on non-Salesforce platforms.
Retention Period: Customer data will be retained for a period of 7 years from the date of last activity, or as required by regulatory and legal requirements.
Deletion Process: Upon expiration of the retention period, customer data will be marked for deletion and verified for accuracy. The deletion will be initiated by the head of data retention, and completed by the data retention team.
Data Backup and Recovery: Regular backups of customer data will be taken and stored in a secure location. In the event of data loss or deletion, customer data will be recovered from the most recent backup.
Compliance: This policy is designed to comply with all relevant data protection regulations, including GDPR and HIPAA.
Reviews and Auditing: This policy will be reviewed and audited regularly to ensure compliance and to make any necessary updates.
Communication: This policy will be communicated to all customers and any third parties that may be involved in handling customer data.