Data Retention Notice

No automatic deletion

The production system will not delete customer records or files solely because a timer has elapsed. A responsible owner must review the order status and any legal, accounting, support or dispute need before starting an archive.

Manual secure archive

The owner selects eligible completed or closed orders and creates an AES-256 encrypted ZIP archive. It contains a readable order export, submitted files, generated PDFs and a SHA-256 integrity manifest. The password is chosen for that archive and is not stored by the website.

Offline transfer

The encrypted archive must be downloaded to a protected local computer or approved encrypted storage. The archive password should be kept separately in an offline password manager. Downloading is recorded in the administrative audit trail.

Separate confirmed deletion

Source records and files can only be deleted after the archive has been downloaded. Deletion is a separate owner-only action with an explicit acknowledgement and confirmation phrase. The encrypted server copy remains available until the owner separately removes it.

Retention review criteria

Review decisions consider whether an order is complete or closed, whether its verification remains active, and whether records are still reasonably needed for accounting, tax, customer support, fraud prevention, payment disputes, legal claims or another lawful obligation. The system does not apply one automatic period to every category because these needs and applicable duties differ.

Supporting corporate-tax accounting records are retained for at least seven years after the end of the relevant UAE tax period. Identity-document uploads are managed separately and are not kept merely because a financial receipt must be retained.

Customer requests

A customer may submit a privacy request through the contact page. Identity must be verified before disclosure, correction or deletion, and some information may remain restricted where retention is legally required.