EveryAction will delete or return all Customer Data (including copies thereof) processed pursuant to this DPA, on termination or expiration of the Agreement, save that this requirement shall not apply to the extent EveryAction is required by applicable law to retain some or all of the Customer Data, or to Customer Data it has archived on back-up systems, which data EveryAction shall securely isolate and protect from any further processing and delete in accordance with its deletion practices.