Purpose

LuminaLeap Technologies (Pty) Ltd retains information only for as long as necessary to fulfil operational, legal, contractual, security, and regulatory obligations.

Scope

This policy applies to:

• Client information
• Employee records
• Financial and accounting records
• Technical logs and system records
• Marketing and communication records
• Recruitment and HR records
• Website and platform data

Retention Principles

We aim to:

• Retain only necessary information
• Minimise unnecessary storage of personal information
• Secure retained data appropriately
• Dispose of information securely when no longer required

Retention Periods

Retention periods may vary depending on:

• Legal obligations
• Tax and financial regulations
• Contractual requirements
• Operational needs
• Cybersecurity and forensic requirements

Examples may include:

• Financial records retained in accordance with South African legislation
• Recruitment records retained for a reasonable recruitment period
• Security logs retained for monitoring and incident investigation purposes

Secure Disposal

Information that is no longer required may be:

• Permanently deleted
• Securely destroyed
• Anonymised where appropriate

Access and Control

Access to retained information is restricted to authorised individuals with legitimate business purposes.

POPIA Compliance

Personal information retention and disposal are managed in accordance with POPIA and related legal obligations.

Policy Review

This policy may be reviewed and updated periodically to align with operational and regulatory requirements.