This Policy sets out the period for which Enzar Digital retains user data and the principles governing the retention and deletion of data.
Data retention principles
At Enzar Digital we adhere to the principle of data minimisation: we retain only what is necessary to achieve the purposes for which the data was collected, and only for the period required to do so. All retention periods are subject to periodic review to ensure compliance with the applicable regulations. The criteria we rely on to determine retention periods include: the nature of the data and the purpose of its collection, the applicable legal and regulatory requirements, and our contractual obligations toward clients and partners.
Retention periods for different data types
Personal account data
Your personal account data — such as name, email address, and profile information — is retained throughout the period the account is active. Upon receipt of an account deletion request, the timelines set out in the Account Deletion Policy apply, whereby the account is permanently deleted within 30 days of the date the request is submitted.
Usage logs and analytics
Detailed usage logs are retained for 12 months from the date of their creation, followed by a scheduled automatic deletion. Aggregated, anonymous analytics data may be retained for a longer period for product development purposes.
Financial transaction data
Financial transaction data — such as billing and payment records — is data subject to strict legal requirements. It is retained for a period of no less than 7 years from the date the transaction is carried out, in fulfilment of the accounting and tax requirements in force in the Kingdom of Saudi Arabia.
Technical support records and correspondence
Records of technical support conversations and correspondence relating to assistance requests are retained for 24 months from the date the ticket is closed or the correspondence ends, followed by an automatic deletion.
Cookies and temporary data
Non-essential cookies expire within a period ranging from one hour to 12 months, depending on their type and purpose. Data backups are retained for 90 days, followed by a scheduled periodic deletion.
Exceptional data retention
In certain exceptional cases, we may retain specific data for periods exceeding those mentioned above, in the following situations: the existence of ongoing or anticipated legal disputes, where the relevant data is retained until the legal proceedings have concluded; or the existence of requests issued by governmental or judicial authorities requiring the retention of certain data for a specified period.
Data security during the retention period
Throughout the entire data retention period, we are committed to applying the highest security standards to protect your information from unauthorised access, damage, or loss. This includes comprehensive encryption of stored data, strict access controls, and periodic security reviews.
Requesting information about your data
You have the right at any time to enquire about the types of data we hold about you and the duration of its retention, by contacting us at: hello@enzar.com. We will respond to your request within 30 business days, providing a full explanation of the measures taken regarding your data.
