Last updated: 3 September 2026
Jack’s Burger retains personal data only for as long as reasonably necessary for the purpose for which it was collected, to meet legal and accounting requirements, resolve disputes, enforce agreements, maintain security and protect legitimate business interests.
Indicative retention schedule
| Data type | Typical retention | Reason |
|---|---|---|
| Customer account/profile data | While account is active; normally deleted/anonymised after closure subject to legal needs | Account administration and service |
| Order and transaction records | Normally up to 7 years from the end of the relevant financial/accounting period, where required | Tax, accounting, audit and dispute purposes |
| Payment transaction references | For the period required by payment, accounting, fraud-prevention and legal requirements | Payment reconciliation and compliance |
| Spice Club/loyalty data | While membership is active; reviewed after prolonged inactivity and normally deleted/anonymised when no longer required | Loyalty administration |
| Marketing preferences/consent records | While relevant and for a reasonable period after withdrawal/last marketing to demonstrate compliance | PECR/data-protection compliance |
| Customer support/complaints | Normally up to 3 years after closure, or longer where necessary for legal claims | Service improvement and dispute handling |
| Technical/security logs | Typically 12 months unless a longer period is needed for security, investigation or legal reasons | Security and fraud prevention |
| CCTV, where used | Normally a short period such as 30 days, unless required for an incident or legal matter | Security and incident investigation |
| Website cookie/local-storage data | For the period stated in the Cookie Policy or until cleared/withdrawn | Website functionality and preferences |
These are indicative periods, not automatic deletion deadlines. Specific systems may have different retention periods based on legal requirements, supplier architecture and operational needs. We periodically review retained information and securely delete or anonymise information when it is no longer required.
Where a customer requests deletion, some information may need to be retained or converted to an anonymised form where retention is required by law or is necessary to establish, exercise or defend legal claims.