Back to Legal Centre

Data Retention Schedule

UAE PDPL · v2.1 · 1 Jan 2026

DALIL retains personal data only for as long as necessary for the purpose for which it was collected, subject to any legal or regulatory obligations that extend the retention period. This schedule is reviewed annually.

Data Category	Retention Period	Retention Trigger	Legal Basis
🪪Identity & KYC Documents	5 years	Account closure	UAE AML / KYC
📋Professional Licence & Credentials	7 years	Account closure	UAE Professional Licensing
💰Transaction & Payment Records	7 years	Transaction date	UAE Commercial Law
🧾Invoice & VAT Records	5 years	Tax period end	UAE VAT Law
📝Contract & Proposal Records	5 years	Contract end date	UAE Contracts Law
💬Platform Messages	2 years	Message sent date	PDPL Legitimate Interest
🎙️Session Recordings (consented)	90 days	Recording date	PDPL Explicit Consent
⚖️Dispute Evidence & Records	7 years	Dispute closure	UAE Civil Law (litigation period)
📊Audit Logs	7 years	Log creation date	Regulatory compliance
✅Policy Acceptance Records	7 years	Acceptance date	Regulatory compliance
🔐User Rights Requests	3 years	Request date	UAE PDPL
📧Marketing Consents	3 years	Consent date	UAE PDPL
📱Device & Usage Logs	12 months	Log creation date	Legitimate Interest (security)
📈Anonymised Analytics	Indefinite	N/A	No personal data — PDPL exempt

Deletion Process

✓Automated deletion jobs run daily to identify expired data
✓Deletion is cryptographic erasure for encrypted stores
✓Backups purged within 30 days of primary deletion
✓Deletion certificates issued on request

Retention Exceptions

!Active legal proceedings or regulatory investigations
!Unresolved disputes — data retained until final resolution
!Fraud prevention — risk flagged accounts may have extended holds
!Explicit user request to retain (e.g., for their own records)