Data Retention Policy

Last Updated: June 8, 2025

Introduction

This Data Retention Policy outlines how Oauelim retains, stores, and deletes personal data and other information collected through our platform. We are committed to retaining data only for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations.

Scope of This Policy

This policy applies to all data collected and processed by Oauelim, including:

Personal information provided during account registration
Course enrollment and learning progress data
Payment and transaction records
Communication records including emails and support tickets
Technical data such as log files and usage analytics
User-generated content including assignments and project submissions

Data Retention Principles

We retain data based on the following principles:

Necessity: Data is retained only as long as needed for the purposes for which it was collected
Legal Compliance: We retain data to meet legal, regulatory, and contractual obligations
User Rights: We respect user rights to access, correct, and delete their personal data
Security: Retained data is protected with appropriate security measures
Transparency: We communicate clearly about our retention practices

Retention Periods by Data Category

Account Information

Data Type: Name, email address, password, profile information

Retention Period: Retained for the duration of account activity plus 12 months after account closure or last login

Reason: To provide ongoing service, support account recovery, and address potential disputes

Course Enrollment and Learning Data

Data Type: Course registrations, progress tracking, completion certificates, grades, quiz responses

Retention Period: Retained for the duration of account activity plus 3 years after course completion or account closure

Reason: To maintain learning records, issue certificates, and provide historical access to completed courses

Payment and Transaction Records

Data Type: Purchase history, payment method details, transaction amounts, invoices

Retention Period: Retained for 7 years from the date of transaction

Reason: To comply with financial record-keeping requirements, process refunds, and resolve payment disputes

Communication Records

Data Type: Email correspondence, support tickets, chat messages, feedback submissions

Retention Period: Retained for 2 years from the date of last communication

Reason: To maintain service continuity, resolve ongoing issues, and improve customer support quality

Technical and Usage Data

Data Type: IP addresses, device information, browser type, access logs, cookies

Retention Period: Retained for 12 months from collection date

Reason: To ensure platform security, troubleshoot technical issues, and analyze usage patterns

User-Generated Content

Data Type: Forum posts, comments, project submissions, uploaded files

Retention Period: Retained for the duration of account activity or until user requests deletion

Reason: To maintain platform functionality and community interactions

Marketing and Communication Preferences

Data Type: Email subscription status, communication preferences, marketing consent records

Retention Period: Retained until consent is withdrawn plus 1 year to honor opt-out requests

Reason: To respect user preferences and maintain compliance with marketing regulations

Extended Retention Circumstances

We may retain data beyond standard periods when:

Required by law, regulation, or legal process
Necessary to establish, exercise, or defend legal claims
Needed to resolve disputes or enforce our agreements
Essential for fraud prevention and security investigations
You have explicitly requested extended retention

Data Deletion and Anonymization

Deletion Process

When retention periods expire, we employ the following deletion methods:

Permanent deletion from active databases and backup systems
Overwriting of storage media to prevent data recovery
Destruction of physical records containing personal data
Removal from third-party systems and service providers

Anonymization

In certain cases, we may anonymize data instead of deleting it. Anonymized data cannot be linked back to individual users and may be retained indefinitely for:

Statistical analysis and research
Platform improvement and development
Trend identification and reporting

User Rights and Requests

You have the right to:

Access: Request a copy of your personal data we retain
Correction: Update or correct inaccurate information
Deletion: Request deletion of your data before standard retention periods expire
Portability: Receive your data in a structured, machine-readable format
Objection: Object to certain types of data processing

To exercise these rights, contact us at help@bigideas.monster. We will respond to requests within 30 days.

Limitations on Deletion

We may be unable to delete data immediately when:

Legal obligations require us to retain it
It is necessary to complete transactions you initiated
It is needed to detect and prevent fraud or security incidents
It is required to resolve disputes or enforce agreements

Third-Party Data Processors

We work with third-party service providers who process data on our behalf. These processors are contractually obligated to:

Retain data only for specified purposes and periods
Implement appropriate security measures
Delete or return data when services are terminated
Comply with our data retention requirements

Backup and Archival Systems

We maintain backup copies of data for disaster recovery purposes. Backup systems follow these practices:

Backups are retained for a maximum of 90 days
Deleted data may persist in backups until the backup cycle completes
Backup systems are secured with encryption and access controls
Restoration from backups occurs only in emergency situations

Inactive Account Management

Accounts with no login activity for 24 consecutive months are considered inactive. For inactive accounts:

We send email notifications at 18 months and 22 months of inactivity
After 24 months, accounts may be suspended
After 36 months of inactivity, accounts and associated data may be permanently deleted
Users can reactivate suspended accounts by logging in before deletion occurs

Changes to This Policy

We may update this Data Retention Policy to reflect changes in our practices, legal requirements, or business operations. When we make material changes:

We will update the Last Updated date at the top of this policy
We will notify active users via email or platform notification
Continued use of our platform after changes constitutes acceptance

Contact Information

For questions about this Data Retention Policy or to submit data requests, contact us:

Email: help@bigideas.monster
Phone: +27845097273
Address: Cnr Sefako Makgatho Dr & Enkeldoorn Ave Shop 29a, Kolonnade Retail Park, Montana, Pretoria, 0182, South Africa

Compliance and Oversight

Our data retention practices are regularly reviewed to ensure compliance with applicable laws and industry standards. We maintain internal documentation of retention schedules and deletion procedures for audit purposes.