Data Retention Policy

This policy explains how long The Dragon Lair retains personal information and the reasons for doing so.

Purpose

We retain information only as long as needed to provide services, meet legal obligations, and respond to legitimate requests.

Information Retained

We may retain:

• Client contact details
• Booking history
• Payment records
• Course enrolment records
• Email correspondence
• Client notes where necessary for continuity of service

Retention Periods

• Client records: Up to 7 years after the last interaction.
• Financial records: 6 years plus the current tax year, or longer where legally required.
• Marketing consent records: Until consent is withdrawn.
• Email enquiries that do not result in a booking: Up to 12 months.

Secure Storage

Information is stored securely using password-protected devices and secure cloud services where appropriate.

Access is limited to authorised personnel only.

Disposal

When retention periods expire, information will be securely deleted or permanently destroyed.

Individual Rights

Clients may request access, correction, or deletion of their information, subject to legal obligations requiring certain records to be retained.

Review

This policy will be reviewed periodically and updated where necessary to reflect changes in legislation or business practices.