Data retention schedule
Last updated: 11 September 2026. Last Dices keeps personal information only for as long as reasonably necessary for a defined purpose, a legal or accounting obligation, security, dispute resolution or the establishment, exercise or defence of legal claims. This public schedule gives the operational baseline; a longer or shorter period may apply where law or a documented necessity requires it.
Operational retention periods
- Waitlist records: while the selected product programme is active, then reviewed for deletion or anonymisation after 24 months of inactivity.
- Consent, unsubscribe and objection records: retained for as long as reasonably needed to prove and respect the choice, including after suppression from active marketing lists.
- Support correspondence: normally up to 24 months after closure, unless a dispute, warranty, security or legal matter requires longer retention.
- Account/profile data: while the account is active and for a limited closure period needed for security, recovery, disputes and lawful records.
- Security and access logs: generally up to 12 months unless needed for an active investigation, incident or legal claim.
- Transaction, tax and accounting records: retained for the statutory period required by applicable South African tax, company and accounting law.
- PAIA/privacy request records: retained for the period reasonably necessary to demonstrate request handling, decisions and legal compliance.
- Backups: removed through normal backup rotation; deleted live data may remain temporarily in protected backups until the relevant rotation expires.
Deletion and anonymisation
When a retention purpose ends, information is deleted, securely disposed of or irreversibly anonymised where reasonably practicable. A deletion request does not require removal of information that must lawfully be retained, is needed to exercise or defend a legal claim, or is subject to another valid exception. We aim to minimise retained fields rather than keep complete records unnecessarily.
Marketing suppression records
When someone objects to direct marketing, Last Dices may retain a minimal suppression record, such as the relevant email or mobile identifier and objection date, so the person is not accidentally re-added to marketing. A suppression record is not used to continue marketing.
Third-party processors
Where service providers process information for Last Dices, their retention and deletion behaviour is assessed against the service purpose and contractual/legal requirements. Provider backups and security logs may follow separate documented rotation periods.
To request deletion or ask about a specific record, use Privacy & Data Rights. See also the Privacy Policy.