7. Retaining personal information

7.1    This Section 7 sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal information.

7.2    Personal information that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

7.3    Without prejudice to Section 7.2, we will usually delete personal data falling within the categories set out below at the date/time set out below:

(a)    personal data related to mailing list subscriptions will be deleted two years after you unsubscribe from our mailing list.

7.4    Notwithstanding the other provisions of this Section 7, we will retain documents (including electronic documents) containing personal data:

(a)    to the extent that we are required to do so by law;

(b)    if we believe that the documents may be relevant to any ongoing or prospective legal proceedings; and

(c)    in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).