DATA RETENTION POLICY
Mystic Lane seeks to ensure that it retains only data necessary to effectively conduct its program activities and work in fulfilment of its mission. The need to retain data varies widely with the type of data and the purpose for which it was collected. Mystic Lane strives to ensure that data is only retained for the period necessary to fulfil the purpose for which it was collected and is fully deleted when no longer required. This policy sets forth Mystic Lane's guidelines on data retention and is to be consistently applied throughout the organization. Scope This policy covers all data collected by Mystic Lane and stored on Mystic Lane owned or leased systems and media, regardless of location. It applies to both data collected and held electronically (including photographs, video and audio recordings) and data that is collected and held as hard copy or paper files. The need to retain certain information may be mandated by federal or local law, federal regulations and legitimate business purposes, as well as the EU General Data Protection Regulation (GDPR). Reasons for Data Retention Mystic Lane retains only that data that is necessary to effectively conduct its program activities, fulfill its mission and comply with applicable laws and regulations.