HRHK Solutions, LLC | Effective Date: January 1, 2026 | Last Updated: January 1, 2026
HRHK retains data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. We apply the principle of data minimization: collect only what is necessary, retain only what is needed, and dispose of what is no longer required.
This policy describes our general data retention practices. Specific retention periods for client data may be defined in applicable agreements, statements of work, or data processing agreements.
Contact form submissions are retained for the duration of the relevant inquiry or engagement and for 2 years thereafter, unless a longer retention period is required by law or applicable agreement.
Server access logs are retained in accordance with our hosting provider's policies and operational requirements, typically between 90 days and 1 year. Logs may be retained longer if required for security investigations or legal proceedings.
Records related to client engagements—including proposals, statements of work, deliverables, correspondence, and technical documentation—are retained according to the terms of applicable agreements and for the period required by applicable law.
Security-related logs, audit trails, and incident records may be retained for extended periods (1 to 7 years) to support security investigations, compliance requirements, and legal obligations.
Aggregated, non-personally-identifiable analytics data may be retained for up to 24 months to understand website usage patterns and improve content and navigation.
System backups are retained for 30 to 90 days depending on the system and data classification. Backups are overwritten on a rotating schedule and securely disposed of when no longer needed.
When determining how long to retain data, HRHK considers:
When data is no longer needed, HRHK disposes of it securely using methods appropriate to the data type and sensitivity:
Depending on your jurisdiction, you may have the right to request deletion of your personal data. Please note that we may retain certain data even after a deletion request if retention is required by law, necessary for legal claims, or required for legitimate business purposes.
To exercise your rights, please contact us:
We may update this Data Retention Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this policy. We encourage you to review this policy periodically.
Publication Readiness
How long HRHK retains different categories of data, retention criteria, secure disposal practices, and your rights regarding data.
Decision Table
| Signal | Implementation Evidence | Visitor Value |
|---|---|---|
| Policy scope | Who and what the policy covers | Improves clarity before publication |
| Control statement | Responsibilities, limitations, and contact route | Reduces ambiguity |
| Enterprise confidence | Privacy, security, accessibility, and disclosure posture | Supports vendor review |