Record of processing activities
Each entry names the purpose, the categories of people and data involved, our lawful basis, who the data is shared with, whether it leaves the UK, and how long it is retained.
Loading register…
Retention & deletion schedule
Retention runs from a trigger event, not from the date a record was created. Append-only audit ledgers are annotated rather than rewritten, so integrity evidence survives an erasure while the personal data inside it is redacted.
Loading schedule…
Upcoming deletions
Where a rule is automated, a scheduler runs it on a fixed cycle and deletes records past their retention window. This is the live forecast: the next scheduled run per data type and how many records are currently past their cut-off. Rules marked for review are actioned by our privacy team instead of automatically.
Loading deletion forecast…
Past retention & deletion runs
Every executed sweep is recorded. Open a run to see what was removed per data type and the cut-off date applied, or download the evidence record — a JSON document carrying its own SHA-256 digest so it can be shown to be unaltered.
Loading run history…
Privacy notice centre
Layered notices by participant role and event.
Consent & preferences
Change tracking, email and profiling choices; download your consent evidence.
Data rights & complaints
Access, correction, erasure and DUAA 2025 complaints with tracked fulfilment.