Data retention policy

We keep personal data only as long as we need it for the purpose it was collected for, or as the law requires.

• Volunteer profiles: while the account is active, and up to two years after the last activity.
• Rejected applications: deleted 12 months after the decision.
• Donation records and receipts: seven years, for accounting and audit purposes.
• Certificates: kept so they can still be verified, unless the volunteer asks for deletion.
• Contact messages: 24 months.
• Security logs: 12 months.

When data is no longer needed it is deleted or anonymised. You can ask for earlier deletion from your dashboard or by email.

Last updated: 18 October 2026