Data Retention Policy
Last Updated: July 31, 2025
This Data Retention Policy explains how Desuklan ("we," "us," or "our") retains, stores, and manages personal data and other information collected through our educational platform at budget-desuklan.com.
1. Purpose and Scope
This policy applies to all data collected from users of our online educational services, including learners, instructors, and visitors. We retain data only as long as necessary to fulfill the purposes outlined in our Privacy Policy and to comply with legal obligations.
2. Types of Data We Retain
We retain various categories of data for different periods based on their purpose:
2.1 Account and Profile Information
Data including names, email addresses, profile details, and account credentials are retained for the duration of your active account plus an additional period as specified below.
2.2 Educational Content and Progress Data
Course enrollments, completion records, quiz results, assignments, certificates, and learning progress are retained to maintain educational records and provide ongoing access to your learning history.
2.3 Communication Records
Support tickets, emails, chat messages, and other communications with our team are retained to provide quality service and resolve disputes.
2.4 Payment and Transaction Data
Billing information, purchase history, and transaction records are retained for accounting, tax compliance, and fraud prevention purposes.
2.5 Technical and Usage Data
Log files, IP addresses, device information, cookies, and analytics data are retained to maintain platform security, improve services, and analyze user behavior.
3. Retention Periods
We apply the following retention schedules to different data categories:
| Data Category | Retention Period |
|---|---|
| Active account data | Duration of account plus 90 days after closure |
| Educational records and certificates | 7 years after course completion or account closure |
| Payment and billing records | 7 years from transaction date |
| Support communications | 3 years after case closure |
| Marketing communications | Until consent is withdrawn plus 30 days |
| Technical logs and analytics | 12 months from collection |
| Security incident records | 5 years from incident resolution |
| Legal dispute documentation | Duration of dispute plus 7 years |
4. Legal Basis for Retention
We retain data based on the following legal and business justifications:
- Contract Performance: To provide educational services and maintain your account
- Legal Obligations: To comply with tax, accounting, and regulatory requirements
- Legitimate Interests: To prevent fraud, maintain security, and improve our services
- Consent: Where you have provided explicit permission for specific data processing
- Educational Records: To maintain academic integrity and provide proof of completion
5. Data Storage and Security
During the retention period, we implement appropriate technical and organizational measures to protect your data:
- Encryption of data at rest and in transit
- Access controls limiting data access to authorized personnel
- Regular security audits and vulnerability assessments
- Secure backup systems with retention controls
- Employee training on data protection practices
6. Data Deletion and Anonymization
6.1 Automatic Deletion
When retention periods expire, we automatically delete or anonymize data unless legal requirements mandate longer retention. Our systems perform scheduled reviews to identify and remove data that has exceeded its retention period.
6.2 Anonymization
In some cases, instead of deletion, we may anonymize data by removing personally identifiable information. Anonymized data may be retained indefinitely for statistical analysis and service improvement.
6.3 Backup Systems
Data may persist in backup systems for up to 90 days after deletion from production systems. Backup data is subject to the same security measures as active data.
7. User Rights Regarding Retained Data
You have the following rights concerning data we retain:
- Access: Request copies of your retained personal data
- Correction: Update or correct inaccurate information
- Deletion: Request early deletion of your data, subject to legal limitations
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to certain types of data processing
- Restriction: Request limited processing of your data
To exercise these rights, contact us at [email protected] or +65 6365 0259.
8. Extended Retention Circumstances
We may retain data beyond standard periods in the following situations:
- Active legal proceedings, investigations, or disputes
- Regulatory inquiries or audits
- Fraud prevention and detection activities
- Protection of our legal rights and interests
- Compliance with court orders or legal mandates
- User requests for educational record preservation
9. Third-Party Service Providers
We engage third-party service providers who may retain data on our behalf. These providers are contractually required to:
- Follow retention schedules consistent with this policy
- Implement appropriate security measures
- Delete or return data upon contract termination
- Process data only according to our instructions
10. Educational Records Exceptions
Course completion certificates, learning transcripts, and achievement records may be retained beyond standard periods to:
- Provide proof of educational accomplishments
- Maintain academic integrity and prevent fraud
- Comply with educational accreditation requirements
- Enable verification by employers or other institutions
You may request reduced retention of these records, subject to our legitimate educational interests.
11. Inactive Account Management
Accounts inactive for 24 consecutive months may be subject to:
- Email notification of pending data deletion
- 90-day grace period to reactivate the account
- Deletion of account data except educational records
- Anonymization of usage and analytics data
12. Data Minimization
We regularly review retained data to ensure we collect and retain only what is necessary. This includes:
- Quarterly audits of data collection practices
- Annual reviews of retention schedules
- Automated removal of redundant or obsolete data
- Continuous improvement of data management processes
13. Changes to This Policy
We may update this Data Retention Policy periodically to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated through:
- Email notification to registered users
- Prominent notices on our website
- Updated "Last Updated" date at the top of this policy
Continued use of our services after policy updates constitutes acceptance of the revised terms.
14. Policy Enforcement
Compliance with this policy is mandatory for all employees, contractors, and service providers with access to user data. Violations may result in disciplinary action, contract termination, or legal proceedings.
15. Contact Information
For questions, concerns, or requests regarding data retention:
- Email: [email protected]
- Phone: +65 6365 0259
- WhatsApp: https://wa.me/6563650259
- Signal: https://signal.me/#p/+6563650259
- Mail: Desuklan, 71 Lucky Heights, Singapore 467623
We will respond to all inquiries within 30 days of receipt.
16. Accountability and Documentation
We maintain internal documentation of our data retention practices, including:
- Data inventory and classification records
- Retention schedule implementation logs
- Deletion and anonymization audit trails
- Staff training and compliance records
- Third-party data processing agreements
17. International Data Transfers
Data may be stored and processed in multiple locations. When data is transferred internationally, we ensure equivalent retention and protection standards through appropriate safeguards and contractual commitments.
