Data Retention Policy
This Data Retention Policy explains how long TechWilla (“we”, “us”, “our”) retains different categories of data collected through our website at techwilla.com. This policy supplements our Privacy Policy and is maintained in accordance with GDPR Article 5(1)(e) — the storage limitation principle.
1. Retention Periods by Data Type
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Google Analytics data (GA4) | 14 months | Legitimate interest (GDPR Art. 6(1)(f)) |
| Cookie consent preferences | 12 months (then re-prompted) | Consent (GDPR Art. 6(1)(a)) |
| Contact form submissions | 24 months | Legitimate interest (GDPR Art. 6(1)(f)) |
| First-party page analytics (self-hosted, IP anonymized) | 14 months | Legitimate interest (GDPR Art. 6(1)(f)) |
| Admin account activity log (logins, password changes) | 12 months | Legitimate interest (security) |
| Server access logs (nginx) | 90 days | Legitimate interest (security) |
| Error logs | 30 days | Legitimate interest (debugging) |
| Google AdSense ad interaction data | As per Google's retention policy | Consent (via CMP) |
| Essential cookies (session) | Browser session only | Necessary (GDPR Art. 6(1)(b)) |
| Advertising cookies (Google) | Up to 13 months (Google-managed) | Consent (via CMP) |
| CCPA opt-out preference | Indefinite (until user clears) | Legal obligation (CCPA) |
2. Legal Basis for Retention
Under GDPR Article 5(1)(e), personal data must be kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed. We retain data based on:
- Consent: Analytics and advertising data is retained only while consent remains valid (12 months, then re-prompted).
- Legitimate interest: Server logs and contact submissions are retained for security, debugging, and correspondence purposes.
- Legal obligation: Privacy opt-out preferences are stored as long as legally required to honor them.
3. Automated Deletion
- Nginx access logs are rotated and deleted after 90 days via
logrotate. - Error logs are rotated and deleted after 30 days.
- GA4 data retention is configured to 14 months in the Google Analytics property settings.
- Contact form submissions, first-party analytics, and admin activity logs are purged from the database by an automated job that runs daily, so no record is retained beyond the period stated above.
4. Your Rights
You have the right to:
- Request deletion of your personal data at any time by contacting us at contact@techwilla.com.
- Withdraw consent for analytics and advertising cookies via the Cookie Settings button on any page.
- Request access to data we hold about you (GDPR Article 15).
- Request portability of your data in a machine-readable format (GDPR Article 20).
We will respond to all data requests within 30 days.
5. Third-Party Data Processors
The following third parties process data on our behalf and maintain their own retention policies:
- Google Analytics (GA4): Data retention settings
- Google AdSense: Google data retention
- Google Funding Choices (CMP): Consent signals stored locally in browser
6. Changes to This Policy
We may update this policy to reflect changes in our data practices or legal requirements. The “Last Updated” date at the top indicates when this policy was last revised. Continued use of our site after changes constitutes acceptance of the updated policy.
7. Contact
For questions about data retention or to exercise your rights, contact us:
- Email: contact@techwilla.com
- Contact form: techwilla.com/contact