Data Retention Policy

This Data Retention Policy explains how long Tradelynx retains different categories of data and the factors used to determine retention periods.

This policy is issued by Tradelynx Limited.

This policy should be read alongside our Privacy Policy.

We retain data only for as long as reasonably necessary to:

• provide and operate the Service
• maintain security, fraud prevention, and auditability
• resolve disputes and support requests
• comply with legal, tax, accounting, and regulatory obligations
• enforce our Terms and protect the platform

The following are indicative retention periods and should be reviewed periodically as legal requirements evolve.

• Customer account records: duration of account plus up to 6 years after closure where legally required
• Trader account and compliance records: duration of trader account plus up to 6 years for compliance/audit
• Enquiries/leads and job records: up to 6 years from closure
• Message threads and attachments: up to 3 years from last activity
• Support tickets and attachments: up to 3 years from ticket closure
• Payment/billing records: up to 6 years in line with accounting and tax obligations
• Security and access logs: typically 12 months unless extended for investigations

Trader verification documents may be processed to extract metadata (such as expiry dates, reference numbers, and review flags). Depending on platform configuration, original uploaded files may be deleted after processing while extracted metadata is retained for compliance monitoring and audit purposes.

You should finalize and document:

• whether original trader documents are retained or immediately deleted
• how long extracted metadata is retained
• how re-verification and expired-document data is handled

Where feasible and appropriate, data may be deleted or anonymized after the relevant retention period expires, unless longer retention is required by law or for active disputes, investigations, or fraud prevention.

We may retain data for longer than standard periods where necessary for legal claims, regulatory requests, litigation holds, fraud investigations, safeguarding, or enforcement of platform rules.

Data deletion or access requests are handled in accordance with applicable law and our Privacy Policy. Some data may need to be retained despite a deletion request where we have a lawful basis to continue processing it.

We may update this Data Retention Policy from time to time to reflect legal requirements, operational changes, or platform features.