Data Retention Policy

We keep personal data only as long as needed for the purpose collected, or as required for legal, tax, accounting, fraud prevention, chargeback, dispute, security, and audit reasons.

Account profile data is kept while the account is active, then deleted or anonymized on a valid request unless retention is required. Optional saved billing addresses are kept while saved by the customer or until a valid deletion request applies.

Pickup contact and selected store or Travel & Express point snapshots attached to orders are kept with the related order records for fulfillment, support, refund, fraud-prevention, accounting, legal, and audit reasons.

Coordinates used for optional nearest-point help are temporary and are not retained in the customer's account, order, or the shop database.

Stale pre-order carts that have no order or payment attempt are normally kept for up to 30 days. Orders and payment attempts, including unresolved provider payment states, are not deleted by stale-cart cleanup and follow the order, payment, accounting, dispute, fraud-prevention, and audit schedule below. Password reset, login attempt, and account-security events are normally kept for up to 90 days. Application error logs are normally kept for 30 to 90 days depending on provider settings and incident needs.

Orders, invoices, refunds, payment references, tax and accounting records, and related financial audit history are kept for 7 years unless a longer period is required. Staff audit logs tied to product, price, discount, inventory, order, refund, role, payment reconciliation, or direct data repair actions are kept for at least 7 years.

When data no longer needs to be kept, we delete or anonymize it where possible. We may retain order, invoice, payment reference, tax, accounting, chargeback, fraud, dispute, security, or financial audit records where law, payment handling, or store security requires it.