Legal Analytics AI
LegalAnalytics.AI
LoginSign Up

Data Retention Policy

Last updated: 01/11/2025

This policy explains how long we retain personal data and case information, in compliance with UK GDPR and SRA requirements.

Retention Periods
Data TypeRetention PeriodLegal Basis
Active Case DataDuration of case + 7 yearsProfessional negligence limitation period
Closed Case Data7 years from case closureSRA compliance, limitation period
Account DataDuration of account + 2 yearsContract records, audit trail
Medical RecordsSame as case data (7 years post-closure)Legal claims processing (GDPR Art. 9)
Expert Witness DataDuration of expert relationship + 7 yearsProfessional records, verification
Usage Logs90 daysSecurity monitoring, incident response
Security Logs1 yearSecurity audits, breach investigation
Backup Data30 daysDisaster recovery
Data Deletion Process

When retention periods expire, we permanently delete data using the following process:

  1. Automated Review: System identifies data eligible for deletion monthly
  2. Verification: Confirm no legal hold or ongoing litigation
  3. Secure Deletion: Data is cryptographically erased from all systems
  4. Backup Purge: Data removed from backup systems within 30 days
  5. Audit Log: Deletion events logged for compliance
Exceptions to Retention Periods

We may retain data beyond standard periods when:

  • Legal Hold: Ongoing litigation or regulatory investigation
  • User Request: You explicitly request extended retention
  • Legal Obligation: Required by court order or regulatory requirement
  • Legitimate Interest: Fraud investigation or security incident
Early Deletion Requests

You can request early deletion of your data by exercising your "Right to Erasure" under UK GDPR:

  • Contact: privacy@legalanalytics.ai
  • We will respond within 30 days
  • Deletion may be refused if we have legal obligations to retain data
  • You will be informed of the reasons if deletion is refused
Account Closure

When you close your account:

  1. Immediate: Account access disabled
  2. 30 Days: Grace period to export your data
  3. After 30 Days: Data deleted according to retention schedule
  4. Case Data: Retained for 7 years per SRA requirements (unless you request export)
Data Retention Questions?

For questions about data retention or to request early deletion:

Email: privacy@legalanalytics.ai
Response Time: 30 days (as required by UK GDPR)

LegalAnalytics.AI

Built for legal professionals • Medical Expert Witness Matching • Professional standards • Secure & private • Audit-ready

GDPR Compliant
AES-256 Encrypted
SRA Standards
CPR 35 Compliant

© 2025 LegalAnalytics.AI. All rights reserved.