Guiding principle
EN-Time HR should retain personal data only as long as needed for documented service, contractual, security or legal purposes. The final retention schedule must be approved for each type of record, region and customer configuration.
Illustrative retention categories
- Account and profile information: generally for the authorized account lifecycle, plus any applicable legal or dispute-related hold.
- Attendance and payroll: according to employer instructions and the statutory obligations applicable to the organization and jurisdiction.
- Location and attendance selfies: only for a documented attendance verification and dispute-resolution period; avoid indefinite retention.
- Visitor logs and photographs: for the facility’s defined security purpose and approved schedule.
- Student records: according to the institution’s lawful educational purpose and retention schedule.
- Security and audit logs: for a defined incident investigation and security interval.
- Backups: subject to documented rotating backup and expiry cycles; deletion from backups may occur according to controlled expiration or restoration safeguards.
Deletion and exceptions
For eligible requests, data should be deleted or anonymized from active systems through verified application workflows. Limited retention may be necessary for statutory compliance, security, legal claims or other documented lawful reasons; a mere account deactivation is not deletion.
Customer-controlled data
An employer or school may be the decision-maker for its employee, student and visitor records. A request may therefore need coordination with that organization without making the requester navigate an unnecessarily burdensome process.
Contact
Use Account Deletion or Privacy Requests . A final numeric retention matrix and deletion-runbook are deployment prerequisites and must not be fabricated on a marketing website.