Those organisations that process personal data on our behalf are subject to a data processing contract as required by Article 28 of the UK GDPR. This ensures that your data is handled in accordance with the UK GDPR.</p> Transferring your data outside of the UK <p>We transfer personal data outside of the UK by virtue of our cloud hosted platforms. Where this occurs, we depend on EU / UK adequacy decisions or for a transfer to the USA and Australia, standard contractual clauses.</p> Retention periods <p>We will retain your data only for the time we require it for the purposes stated and / or where we have a legal obligation or other legitimate purpose. We will retain the personal data of our current customer contacts for 6 years for our accounting purposes. If you close your account, or when your account is closed after 2 years of inactivity, your personal data is anonymised on our system and only your purchase history (if available) is retained in an identifiable way until the 6 year deletion process takes place.</p>