Data retention
Last updated 13 November 2026
This page is a draft and is still being reviewed. It describes how COMDRO works today.
Our approach
We keep personal data only for as long as we need it to run COMDRO, to deal with problems and to meet the law. When that time is up we delete it, or remove everything that identifies you so it can no longer be linked to you. This page sits alongside our privacy policy.
Your account
| Data | How long we keep it | Why |
|---|---|---|
| Name, email address, phone number and password | How long we keep it:While your account is open | Why:To sign you in and contact you about your orders. |
| Saved addresses and map pins | How long we keep it:While your account is open, or until you remove them | Why:To deliver to you. |
| Saved cards | How long we keep it:Held by Stripe while your account is open, or until you remove them | Why:So you can pay quickly. |
| Favourites and basket | How long we keep it:Favourites while your account is open. A basket you leave is cleared after 7 days | Why:To make shopping easier. |
| Sign in sessions | How long we keep it:You stay signed in for up to 7 days without using COMDRO | Why:To keep your account secure. |
| Codes we text or email you | How long we keep it:15 minutes, and they stop working after 5 wrong attempts | Why:To check it is really you. |
Orders and payments
| Data | How long we keep it | Why |
|---|---|---|
| Orders, payments, refunds, invoices and payouts | How long we keep it:Six years after the end of the financial year they belong to | Why:UK tax and accounting law requires us to keep these records. |
| Problems you report, and their photos | How long we keep it:With the order they belong to | Why:To deal with the problem and show how we resolved it. |
| Proof of delivery photos | How long we keep it:90 days after delivery, or until an open problem on the order is closed | Why:To answer questions about whether an order arrived. |
| Reviews | How long we keep it:While they are published | Why:To help other customers choose. |
Stores and riders
| Data | How long we keep it | Why |
|---|---|---|
| Identity and business documents | How long we keep it:While the account is open. A document is deleted as soon as it is replaced | Why:To show we checked who we work with. |
| Bank details | How long we keep it:While the account is open | Why:To pay you. |
| Rider location | How long we keep it:Only the latest position, replaced as the rider moves, and only collected while online. No history is stored, and it is deleted with the account | Why:To offer deliveries nearby and show customers where their order is. |
| Earnings and payout records | How long we keep it:Six years after the end of the financial year they belong to | Why:UK tax and accounting law. |
Messages and your choices
| Data | How long we keep it | Why |
|---|---|---|
| Notifications in the app | How long we keep it:180 days, then deleted automatically | Why:So you can look back at recent updates. |
| Your phone’s registration for notifications | How long we keep it:Switched off after 60 days without the app being opened, and deleted with your account | Why:To send notifications to the right phone. |
| Your choices about offers, and when you made them | How long we keep it:Six years after you change them or close your account | Why:To show we only sent offers you agreed to. |
| Waiting list sign ups | How long we keep it:Until we deliver to your area, or two years, whichever is sooner | Why:To tell you when we arrive. |
Security and technical records
| Data | How long we keep it | Why |
|---|---|---|
| Records of actions taken in the admin system, with IP addresses | How long we keep it:Two years | Why:To keep COMDRO secure and investigate misuse. |
| Server logs | How long we keep it:30 days | Why:To keep the service running and find faults. |
| Fault reports | How long we keep it:90 days | Why:To find and fix faults. |
| Backups of our database | How long we keep it:14 days, then overwritten | Why:To recover from a serious failure. |
When you delete your account
You can delete your account at any time in the app or on the website: Account, then Delete account.
- Customers: we delete your account as soon as you confirm with the code we email you. Your name, email address, phone number, password, saved addresses, saved cards, favourites, notifications and sign in links with Apple, Google or Facebook are removed straight away.
- Stores and riders: your account is locked straight away, and we finish deleting it within 30 days, once your final payout has been made. Your documents, bank details and location are deleted then.
- What we keep: the records the law makes us keep, such as orders, payments and payouts, stay for the periods above, but without your name or contact details. Delivery addresses on old orders are cut down to the first half of the postcode. Reviews stay, shown under “Deleted customer”.
- Backups: your data disappears from our backups within 14 days, as each backup is replaced.
Questions
If you want us to delete something sooner, or have a question about how long we keep your data, email [email protected]. Where the law doesn’t require us to keep it, we will delete it.