1. Data Retention

• Active Accounts: We retain your business data and documents for as long as your account remains active.
• Deleted Accounts: When you delete your account, all associated data will be permanently removed from our systems within 90 days, unless retention is required by law.
• Legal and Regulatory Obligations: Certain data may need to be retained for a defined period (e.g. financial records required under Australian taxation or corporate law). Such data will be retained securely and only for as long as legally required.
• Anonymised Data: Aggregated or anonymised information that cannot be linked back to you may be retained for service improvement and analytics.

2. Data Storage

• Data is stored securely on reputable third-party infrastructure providers.
• Storage locations may include Australia or other jurisdictions with comparable privacy protections.
• We use access controls, monitoring, and encryption to protect stored data.

3. Security Measures

We implement industry-standard security practices, including:

• Encryption of data in transit and at rest where applicable.
• Access Controls ensuring only authorised personnel can access sensitive data.
• Monitoring & Logging to detect and prevent unauthorised access.
• Regular Updates & Patching of our software and infrastructure.
• Backups & Redundancy to protect against accidental loss.

4. Your Responsibilities

While we take extensive measures to safeguard your information, security also depends on you:

• Keep your login credentials safe and do not share them.
• Ensure your devices and browsers are kept secure and updated.
• Contact us immediately if you suspect unauthorised access to your account.

Liability will not be accepted for any loss or damage caused by a user’s failure to maintain the security of their credentials or devices.

5. Contact Us

If you have questions or requests about data retention or security, please contact: support@orca-management.au