How long we keep your data

We keep personal data only as long as it is needed. Rows marked automatic are removed by a job that runs every day, so nobody has to remember to do it.

Record	Kept for	Why	Removal
Your account, profile and uploaded documents	Until you delete your account, when the profile and every uploaded file are erased	It is your professional record; you can download or delete it at any time.	When the condition is met
Documents you delete	30 days after you delete them, then the file and its record are erased	Hidden from everyone at once; kept briefly so a verification that relied on it can still be audited.	Automatic
Notifications you have read	12 months	Enough to look back on a recent application; the application itself keeps its full history.	Automatic
Notifications never read	24 months	Longer, because you have not seen them yet.	Automatic
Record of which organisations viewed your profile	24 months	So you can see who looked, and so misuse can be investigated.	Automatic
Record of who opened your documents	24 months	Accountability for every time a private document was opened.	Automatic
Record that you downloaded your data	24 months	Proof that a request was answered. The download itself is never stored.	Automatic
Rosters an institution sends us to confirm its students	30 days after the cohort's validity ends	A roster only vouches for one academic year; the badges it issued keep their own record of the check.	Automatic
Search alerts you paused	12 months after you paused them	An alert nobody uses is data nobody needs.	Automatic
Sign-in attempt counters	1 day after their window ends	Used only to stop password guessing.	Automatic
Applications, decisions and their history	Until you delete your account. If you have made a payment or completed a placement, they are kept with your name and contact details removed	Your record of what you applied to and what happened; completed placements and payments must stay accountable.	When the condition is met
Payments, refunds and receipts	As long as financial record-keeping law requires	Credentia must be able to account for money it has handled.	When the condition is met
Your consent decisions	Until you delete your account	So we can always show what you agreed to, and when.	When the condition is met
Partner requests sent from the homepage form	While our team handles the request, and afterwards as the record of who asked to join. Write to privacy@credentiamed.com to have it removed sooner	So we can reply to the organisation and set it up.	When the condition is met

You can download everything we hold about you, or delete your account, at any time from your privacy settings.

We keep personal data only as long as it is needed. Rows marked automatic are removed by a job that runs every day, so nobody has to remember to do it.

Record	Kept for	Why	Removal
Your account, profile and uploaded documents	Until you delete your account, when the profile and every uploaded file are erased	It is your professional record; you can download or delete it at any time.	When the condition is met
Documents you delete	30 days after you delete them, then the file and its record are erased	Hidden from everyone at once; kept briefly so a verification that relied on it can still be audited.	Automatic
Notifications you have read	12 months	Enough to look back on a recent application; the application itself keeps its full history.	Automatic
Notifications never read	24 months	Longer, because you have not seen them yet.	Automatic
Record of which organisations viewed your profile	24 months	So you can see who looked, and so misuse can be investigated.	Automatic
Record of who opened your documents	24 months	Accountability for every time a private document was opened.	Automatic
Record that you downloaded your data	24 months	Proof that a request was answered. The download itself is never stored.	Automatic
Rosters an institution sends us to confirm its students	30 days after the cohort's validity ends	A roster only vouches for one academic year; the badges it issued keep their own record of the check.	Automatic
Search alerts you paused	12 months after you paused them	An alert nobody uses is data nobody needs.	Automatic
Sign-in attempt counters	1 day after their window ends	Used only to stop password guessing.	Automatic
Applications, decisions and their history	Until you delete your account. If you have made a payment or completed a placement, they are kept with your name and contact details removed	Your record of what you applied to and what happened; completed placements and payments must stay accountable.	When the condition is met
Payments, refunds and receipts	As long as financial record-keeping law requires	Credentia must be able to account for money it has handled.	When the condition is met
Your consent decisions	Until you delete your account	So we can always show what you agreed to, and when.	When the condition is met
Partner requests sent from the homepage form	While our team handles the request, and afterwards as the record of who asked to join. Write to privacy@credentiamed.com to have it removed sooner	So we can reply to the organisation and set it up.	When the condition is met

You can download everything we hold about you, or delete your account, at any time from your privacy settings.