Keep what is needed. Remove what is not.

Incomplete registration

Unpaid, incomplete online applications are normally deleted within 24 hours and do not become learner accounts.

Active learner identity

Registration lasts 365 days. If it is not renewed, access is suspended at expiry. After seven days, direct profile identifiers are erased or anonymised and the digital badge is revoked.

Financial and legal evidence

Required transaction, invoice, refund, reconciliation and tax/audit evidence is held in restricted records for six years after the relevant accounting period, or longer only for an active lawful audit, investigation or legal hold. Trainers and content staff cannot access it.

Backups

Deleted live data may remain temporarily in encrypted rolling backups for no more than 180 days. It is beyond normal use. A restoration must reapply completed deletion records before the service returns to operation.

Requests

You may ask what is held and request eligible deletion through the secure privacy form. THNF will explain any lawful exception.