Personal Data Retention and Disposal Policy

Last updated: 11 July 2026

Toruklar Group retains personal data only for the period required by its purpose and applicable law. When the reason for retention ends, data is securely deleted, destroyed or anonymised.

Principles

• Lawfulness and fairness,

• Accuracy and currency where necessary,

• Processing for specific, explicit and legitimate purposes,

• Relevance, limitation and proportionality,

• Retention only for the necessary period.

Determining Retention

Periods are determined with reference to the customer relationship, contractual and warranty processes, commercial and tax laws, limitation periods, information security and potential legal disputes. Quote and contact records are reviewed periodically after their purpose or legal retention period ends.

Disposal

Electronic records are securely erased so they cannot be accessed or reused; storage media is destroyed where necessary. Anonymised data cannot be associated with an identified or identifiable person. Backup copies are overwritten or deleted within the applicable backup cycle.

Security and Access

Access is limited to personnel with a business need. Permissions are reviewed regularly, and logs, backups and transfers are protected with appropriate safeguards. Incident response and notification procedures apply where a personal data breach is suspected.