Data Storage and Retention Policy

Build Then Bless (BTB)

1. Purpose

This policy outlines how BTB collects, stores, and retains user data to ensure the confidentiality, integrity, and security of sensitive information. It also defines the data retention period and conditions for data deletion.

2. Data Storage

2.1. Types of Data Stored

BTB stores data related to transactions and customer interactions for internal use only; such as name, phone number, email, and address. In no way does BTB collect or store PCI or other sensitive data.

2.2. Storage Locations

  • Database: The primary database for storing transactional data. All data is encrypted at rest using industry-standard AES-256 encryption.
  • AWS: Used for additional storage needs, such as backups and logs. Data in AWS is encrypted at rest using server-side encryption (SSE-S3 or SSE-KMS).

2.3. Security Measures

  • All data in transit is secured using TLS (Transport Layer Security) to prevent unauthorized interception.
  • Access to data storage systems is restricted to authorized personnel only, utilizing role-based access controls (RBAC) and multi-factor authentication (MFA).

3. Data Retention

3.1. Retention Period

  • Transactional Data: Stored indefinitely and without intent to remove unless formally requested by the user or an account(s) is removed/deleted. 
  • User Account Data: Stored as long as the user maintains an active account with BTB. Upon account termination, data is retained unless a request for removal is submitted by the user. 
  • Backups: Database backups are stored for 90 days to ensure data integrity and facilitate disaster recovery.

3.2. Data Deletion

  • Upon reaching the end of the retention period, data is securely deleted from our databases and storage systems.
  • Users may request early deletion of their data by contacting our support team. Such requests will be processed within 30 days, ensuring compliance with regulatory requirements.

4. Access Control and Monitoring

  • Access to stored data is limited to authorized personnel within BTB based on job responsibilities.
  • Data access policies are periodically reviewed and updated to align with industry best practices and compliance regulations.

5. Policy Review

This Data Storage and Retention Policy is reviewed annually and updated as needed to comply with changes in data protection regulations or industry standards.

6. Contact Information

For questions regarding this policy or to request data deletion, please complete the form below:

Name(Required)
Email(Required)
Please let us know what's on your mind. Have a question for us? Ask away.