Retention and automatic anonymisation

A privacy request is itself a store of personal data: the requester's name and email, their messages, their uploaded documents, the data you collected about them. Keeping all of that forever would undermine the point. Blankitt Privacy cleans up after itself automatically.

How it works

Under Settings, then Branding & intake you set a retention period (30 days to 10 years, 365 days by default). Once a closed request has been closed for longer than that, it is anonymised automatically:

Removed:

• Collected files and delivery packages.
• Identity and authority documents (identity documents were already deleted at verification).
• The message thread and case notes.
• The requester's identifying details on the request record.

Kept:

• A statistical skeleton: request type, jurisdiction, dates, and outcome. Your Reports history stays accurate forever.
• The audit trail entries, which record actions rather than the requester's data.

Choosing a period

Keep closed requests long enough to handle complaints and appeals arising from them, and to evidence your handling if a regulator asks. One year is a common default. If your sector has a specific limitation period, align with it. Your DPO should own this number.

It also caps your exposure

Anonymisation isn't just compliance hygiene. If your systems were ever breached, closed requests older than your retention period contain nothing personal to lose.