21 Knightsbridge London SW1X 7LY · office@knightsbridgenominee.com
Last updated: 5 August 2026
This policy describes the normal retention periods applied to personal data and business records. It supports our Privacy Policy and may be adjusted where law, litigation, regulation, insurance or the circumstances of a specific engagement require a different period.
| Record category | Normal retention period | Reason |
|---|---|---|
| General enquiries where no engagement begins | Normally 12 months after last meaningful contact | Follow-up, service improvement and evidence of communications |
| Declined or incomplete onboarding records | Normally 12 months; up to 5 years where needed to evidence an AML, fraud, sanctions or legal-risk decision | Risk management, prevention of repeated misuse and legal obligations |
| Client agreements, instructions, material correspondence and service records | Normally 6 years after the relationship or relevant Service ends | Contract administration, legal claims, insurance and audit trail |
| KYC, customer due diligence, beneficial ownership and transaction-supporting records | At least 5 years after the business relationship ends or an occasional transaction completes where anti-money-laundering law applies | Statutory AML record keeping and reconstruction of activity |
| Company formation, director, nominee, registered-office and corporate administration records | Normally 6 years after the Service or appointment ends; longer where law or the continuing company record requires | Corporate history, director duties, filings, disputes and compliance |
| Invoices, payments, bookkeeping and tax records | Normally 6 years after the end of the relevant accounting period, or longer where required | Tax, VAT, accounting, audit and legal obligations |
| Complaints and dispute records | Normally 6 years after final closure | Complaint handling, claims, consistency and service improvement |
| Marketing preferences | Until consent is withdrawn or the contact is inactive and no longer relevant | Relationship management and compliance with marketing choices |
| Suppression records after opt-out | A minimal record may be kept for as long as needed to ensure the person is not contacted again | Respecting objections and preventing accidental re-enrolment |
| Website security logs | Normally up to 12 months, unless required for an incident or investigation | Security, fraud prevention and troubleshooting |
| Cookie and consent records | For the lifetime stated in the Cookie Preferences panel and for a reasonable consent-audit period | Remembering choices and evidencing consent |
| Backup copies | Removed through the normal backup rotation, usually within 90 days after deletion from live systems | System resilience and disaster recovery |
Where the Money Laundering Regulations apply, copies of customer due diligence information and sufficient supporting transaction records are generally retained for five years after the business relationship ends or the occasional transaction completes. After that period, relevant personal data will be deleted unless another law, court proceeding, consent or a reasonable legal-claim basis permits or requires continued retention.
We may retain a record longer where necessary for an active contract, continuing appointment, unresolved payment, complaint, litigation, tax enquiry, fraud investigation, sanctions concern, suspicious-activity matter, professional indemnity requirement, court order or request from a competent authority. We will limit the retained data to what is reasonably necessary.
Where a record is no longer needed, we may delete or anonymise it before the maximum period. We may also retain a limited non-identifying statistical record after personal data has been removed.
Electronic records are deleted using appropriate system controls and physical documents are securely destroyed. Where a third-party processor holds records for us, deletion or return is managed under the relevant contract and retention instructions.
You may request deletion by contacting office@knightsbridgenominee.com. We will assess the request under applicable data protection law. We may be unable to delete information that must be retained for AML, tax, corporate, legal-claim, security or regulatory reasons, but we will explain the applicable reason where lawful.
Retention periods and systems are reviewed periodically and when our services, providers or legal duties change.