ICFOA retains personal data only as long as necessary for the purposes it was collected. This duration considers the nature of the service or activity, any legal or regulatory requirements, and the potential for legal issues.

Regular reviews of retention periods ensure data is not held longer than needed.