Data Retention Policy
This policy states the default operational retention periods and records that are not automatically deleted.
Effective date: 2026-08-11Gym and member data
Core account, member, membership, attendance, training and measurement records remain while the gym is active and are not automatically deleted.
Financial records
Payments, receipts, debts and related records remain until the gym requests a lawful action consistent with accounting obligations.
Trial requests
Closed or converted trial requests are deleted after 730 days. Open requests are not automatically deleted.
Activity log
Gym activity records are retained for 1095 days for security and audit purposes.
Security records
Public-form attempts are deleted after 7 days and login attempts after two days when no longer needed.
Backups
Routine backups are retained for 30 days by default, after which older copies are removed.
Deletion requests
Deletion requests are verified against identity, third-party rights and legal duties. Anonymisation may be used when a financial record cannot lawfully be deleted.