Retention principle
AUREN SUPPLIES LTD keeps identifiable personal information only for as long as it is needed for the purpose collected, a legal obligation, security, accounting or the establishment, exercise or defence of legal claims. Records are deleted, anonymised or securely overwritten when the applicable period ends.
Retention schedule
| Record category | Normal retention | Reason |
|---|---|---|
| Orders, invoices, payment status and transaction records | Six years after the end of the relevant financial year | Tax, accounting, audit and legal obligations |
| Customer account profile and saved details | While active; scheduled for deletion after 24 months without account activity, unless linked records must be retained | Provide the requested account service and minimise inactive data |
| Routine support and pre-order correspondence | Up to 12 months after the matter closes | Customer service and quality control |
| Complaints, disputes, payment investigations or legal claims | Up to six years after closure, or longer where proceedings require | Establish, exercise or defend legal rights |
| Marketing subscription | Until withdrawal or unsubscribe | Honour the requested communication |
| Marketing suppression record | As long as needed to respect the opt-out | Prevent unwanted marketing |
| Checkout acceptance and privacy-choice records | While relied upon and normally up to six years afterwards | Demonstrate the contract and compliance |
| Meta browser and click identifiers | Normally up to 90 days in the browser; temporary order-matching copies are deleted after a successful paid-order event. Matching contact fields are hashed during event preparation and are not saved as a separate Meta-tracking profile by Auren. | Consent-based advert measurement and event matching |
| Security and access logs | Normally up to 12 months, unless an incident requires longer | Security, fraud prevention and investigation |
| Rolling backups | According to the active hosting recovery cycle and overwritten on that cycle | Service recovery and resilience; deleted data may remain inaccessible until the cycle completes |
Open Banking records
Auren retains the Fena payment status and transaction reference needed to reconcile the order and meet accounting duties. We do not receive or retain the customer’s bank password, PIN, biometric record or other online-banking credentials.
When a period may change
A record may be retained longer where required by law, a regulator, court order, fraud investigation, active complaint or legal claim. It may be deleted sooner where there is no continuing lawful purpose. Anonymous information that can no longer identify a person may be retained for statistical purposes.
Deletion and account requests
You may ask us to delete an account or personal information by emailing support@aurenlabs.co.uk. The right to erasure is not absolute: we may retain limited records where a legal obligation, transaction record, fraud-prevention need or legal claim requires it. We will explain any information we must keep.