Knightsbridge Nominee Limited

21 Knightsbridge London SW1X 7LY · office@knightsbridgenominee.com

Data Retention Policy

Last updated: 5 August 2026

This policy describes the normal retention periods applied to personal data and business records. It supports our Privacy Policy and may be adjusted where law, litigation, regulation, insurance or the circumstances of a specific engagement require a different period.

1. Retention principles

  • We keep records only for a defined business, legal, compliance or evidential purpose.
  • We avoid retaining personal data for longer than reasonably necessary.
  • Access is restricted according to role and sensitivity.
  • At the end of the retention period, records are securely deleted, anonymised or destroyed unless a lawful reason requires continued retention.
  • A legal hold, investigation, dispute, court order, regulatory request or insurance requirement may pause routine deletion.

2. Standard retention schedule

Record category Normal retention period Reason
General enquiries where no engagement begins Normally 12 months after last meaningful contact Follow-up, service improvement and evidence of communications
Declined or incomplete onboarding records Normally 12 months; up to 5 years where needed to evidence an AML, fraud, sanctions or legal-risk decision Risk management, prevention of repeated misuse and legal obligations
Client agreements, instructions, material correspondence and service records Normally 6 years after the relationship or relevant Service ends Contract administration, legal claims, insurance and audit trail
KYC, customer due diligence, beneficial ownership and transaction-supporting records At least 5 years after the business relationship ends or an occasional transaction completes where anti-money-laundering law applies Statutory AML record keeping and reconstruction of activity
Company formation, director, nominee, registered-office and corporate administration records Normally 6 years after the Service or appointment ends; longer where law or the continuing company record requires Corporate history, director duties, filings, disputes and compliance
Invoices, payments, bookkeeping and tax records Normally 6 years after the end of the relevant accounting period, or longer where required Tax, VAT, accounting, audit and legal obligations
Complaints and dispute records Normally 6 years after final closure Complaint handling, claims, consistency and service improvement
Marketing preferences Until consent is withdrawn or the contact is inactive and no longer relevant Relationship management and compliance with marketing choices
Suppression records after opt-out A minimal record may be kept for as long as needed to ensure the person is not contacted again Respecting objections and preventing accidental re-enrolment
Website security logs Normally up to 12 months, unless required for an incident or investigation Security, fraud prevention and troubleshooting
Cookie and consent records For the lifetime stated in the Cookie Preferences panel and for a reasonable consent-audit period Remembering choices and evidencing consent
Backup copies Removed through the normal backup rotation, usually within 90 days after deletion from live systems System resilience and disaster recovery

3. AML records

Where the Money Laundering Regulations apply, copies of customer due diligence information and sufficient supporting transaction records are generally retained for five years after the business relationship ends or the occasional transaction completes. After that period, relevant personal data will be deleted unless another law, court proceeding, consent or a reasonable legal-claim basis permits or requires continued retention.

4. Longer retention

We may retain a record longer where necessary for an active contract, continuing appointment, unresolved payment, complaint, litigation, tax enquiry, fraud investigation, sanctions concern, suspicious-activity matter, professional indemnity requirement, court order or request from a competent authority. We will limit the retained data to what is reasonably necessary.

5. Shorter retention and data minimisation

Where a record is no longer needed, we may delete or anonymise it before the maximum period. We may also retain a limited non-identifying statistical record after personal data has been removed.

6. Secure disposal

Electronic records are deleted using appropriate system controls and physical documents are securely destroyed. Where a third-party processor holds records for us, deletion or return is managed under the relevant contract and retention instructions.

7. Requests for deletion

You may request deletion by contacting office@knightsbridgenominee.com. We will assess the request under applicable data protection law. We may be unable to delete information that must be retained for AML, tax, corporate, legal-claim, security or regulatory reasons, but we will explain the applicable reason where lawful.

8. Review

Retention periods and systems are reviewed periodically and when our services, providers or legal duties change.