Data Retention Register
How long each category is kept, what triggers the clock, and what happens at the end of it.
العربيةHow to read this register
Each entry has a trigger — the event the period runs from — a period, an action at expiry, and a review status.
"Pending legal review" means the period is a proposal Warsha has recorded, with no statutory basis claimed. Where that is the status, the action at expiry is manual review rather than deletion, and the rule is disabled so nothing can execute against it.
As at this version, no retention rule created by Warsha is enabled. Nothing is being deleted automatically.
Identity documents
Trigger: upload. Minimum: one year, set by Warsha for evidential reasons and not claimed as a statutory period.
Longer retention on worker account closure is proposed and pending legal review; the action at expiry is manual review.
Treatment: never exported. Reduced review copy used for ordinary review; original opened only when necessary, and every open logged.
Criminal-record certificates
Trigger: worker account closure. Period: proposed, pending legal review, no statutory basis claimed. Action at expiry: manual review.
Treatment: never exported. Offence detail confined to a private reviewer record.
Extraction candidates
Trigger: the worker confirming their identity fields. Proposed period: short, pending review. Action at expiry: delete.
Unconfirmed machine output should not outlive the confirmation it existed to help with.
Bookings, payments and disputes
Trigger: completion or resolution. Retained beyond account closure because the record concerns two people and may be needed by the other, and because financial records carry obligations.
Treatment on account closure: anonymised. The transaction survives; the person does not.
Messages
Trigger: booking completion. Retained long enough for a dispute raised afterwards to be decided on evidence.
Treatment on account closure: anonymised.
Consent and agreement acceptances
Trigger: none while the account exists. Acceptance records are append-only and are retained as long as the obligation to demonstrate consent lasts.
A withdrawal appends a new decision; the earlier record is never edited or removed. Treatment on account closure: preserved, minimised.
Support cases
Trigger: case closure. Retained so a reopened matter has its history.
Treatment on account closure: anonymised.
Diagnostics
Trigger: collection. Short retention. Action at expiry: delete. Contains no personal content.
Legal holds
A record under legal hold is exempt from every rule above. Retention is suspended and deletion is refused, including a deletion the person requested, and they are told their request is blocked.