The GDPR sets up additional requirements around retention of personal data compared to the Data Protection Directive. The detail below highlights J+D Consulting’s policy for retaining personal data. Data storage Personal data is stored on our cloud based Microsoft 365 SharePoint internal file sharing software. Please note that sending/ receiving personal data is no longer permitted across the company and should personal data need to be shared with anyone outside of J+D Consulting, then this will be shared securely via our cloud based Microsoft 365 OneDrive external file sharing software (and then destroyed immediately upon successful receipt). Retention period Our policy ensures that personal data is only retained for as long as necessary. The retention periods below differ due to the type of data processed, the purpose of processing and legal factors.
  • Human resources
    • This includes personal data such as name and address, bank details, contact telephone numbers and next of kin details
    • HR required personal data will be kept for no longer than 3 years after a person ceases to be employed by J+D Consulting
  • Market research
    • This includes personal data such as name, location, job title, email address and/or contact telephone number
    • MR required personal data will be kept for no longer than 3 months after the project has completed or upon request from an individual for their personal data to be erased (whichever is the sooner)
  • Subscription services
    • This is the collection of personal data to enable access to our subscription services (for example, FC+ or our online training platform). This includes name, company, job title, email address, telephone number and IP address
    • Subscription required personal data will be kept for no longer than 1 month after a person cancels/ fails to renew their relevant subscription service or upon request from an individual for their personal data to be erased (whichever is the sooner)
  • Web based queries
    • This includes personal data such as name, company, job title, email address and/or contact telephone number
    • Web required personal data will be kept for no longer than 1 month after the web request/ query has been actioned to the satisfaction of the customer or upon request from an individual for their personal data to be erased (whichever is the sooner)
Our information obligations As part of our data retention policy, it is standard practice to provide individuals access to our data retention policy and to specifically point out the retention period that relates to the context of their personal data. The way we do this is via the following:
  • HR personal data – as part of the initial contract offer and restated in the first couple of days after joining the company
  • MR personal data – at the point of initial screening and repeated, where appropriate, at the beginning of the market research activity itself
  • Subscription personal data – at the point of subscribing to the service
  • Web based personal data – at the very first step of completing the online web form
If for any reason we need to make a change to the retention period after notifying the individual, then this will be communicated at the earliest opportunity. Our review procedure Our data retention policy will be reviewed on an annual basis in May each year. However, should a new source of personal data be identified or if a change is made to the way personal data is stored, then this will immediately trigger a review of the policy.