Data Retention Policy

Purpose

We keep personal information only as long as reasonably needed for the purpose collected, security, legal compliance, accounting, dispute handling, and protection of rights.

General retention periods

• Contact and callback submissions: generally up to 24 months after the last interaction, unless a longer period is reasonably needed for an open matter, consent record, legal claim, or required recordkeeping.
• Lagoon Travel Drop signups: generally retained while you remain on the list, with a limited suppression or consent record retained as reasonably needed to honor an opt-out and document the request.
• Privacy requests and verification records: generally up to 24 months after completion.
• Cookie-choice records: generally up to 24 months, after which the website may ask again.
• Security and technical logs: generally up to 12 months, unless needed to investigate abuse or an incident.
• Analytics and advertising data: controlled partly by vendor settings and each provider’s retention practices. We aim to configure reasonable limits.
• Push notification subscription records: retained by the push provider as needed to maintain an active subscription and related delivery records, subject to provider settings, applicable law, and your ability to unsubscribe or request deletion where applicable.
• Affiliate and accounting records: retained as reasonably needed for commission reconciliation, tax, audit, fraud prevention, and legal obligations.

Deletion and anonymization

Information may be deleted, de-identified, aggregated, or retained in backups until ordinary backup rotation completes. A legal hold or security need may delay deletion.

Your request

Submit a request at Privacy Request. Rights and exceptions depend on applicable law.