Data Retention and Deletion Policy

Principles

We keep personal data only as long as needed for stated purposes, legal obligations, and dispute handling, then delete or irreversibly anonymize it.

Schedule (website and commercial)

Record type	Typical retention	Notes
Contact / quote forms	24 months	Longer if related to an active opportunity or legal claim
Marketing consents / withdrawals	5 years	Proof of consent state
Cookie consent logs	24 months	Policy version + timestamp
Invoices and tax records	7 years	Or longer if required by law
Customer engagement files	Contract term + 3 years	Unless SOW/DPA requires earlier deletion
Security vulnerability reports	3 years	May anonymize earlier
Server/security logs	90 days (default)	Extended during incidents

Deletion requests

Email privacy@farqadcloud.com. We verify the requestor and respond within timelines required by applicable law. Backups roll off on their schedule after deletion from primary systems.

Secure deletion

Deletion uses platform-appropriate methods for the systems we control. Customer cloud accounts owned by the customer remain under customer control.

Change notification

We may update this policy to reflect legal, operational, or service changes. Material changes will be communicated on this page or through another appropriate notice. Where required by law or contract, we will provide additional notice. Where affirmative consent or a contractual amendment is required, continued use alone will not replace that process.