ATTPL HoldCo DATA RETENTION & DELETION POLICY

1. PURPOSE

This Policy establishes requirements for retaining, archiving and securely deleting information throughout its lifecycle.

2. OBJECTIVES

• Regulatory Compliance
• Data Minimization
• Privacy Protection
• Information Security
• Operational Efficiency

3. RETENTION PRINCIPLES

• Data shall be retained only for:
• Legal Requirements
• Contractual Obligations
• Business Necessity
• Security Purposes
• Audit Requirements

4. DATA CATEGORIES

• Personal Data - Retained only as required.
• Farmer Data - Retained according to service requirements.
• Agricultural Data - Retained for analytics, research and operational purposes.
• Financial Records - Retained according to applicable laws.
• Security Logs - Retained for cybersecurity and audit purposes.

5. SECURE DELETION

• Cryptographic Erasure
• Secure Overwriting
• Physical Destruction
• Database Purging

6. USER RIGHTS

• Where legally applicable, users may request:
• Access
• Correction
• Deletion
• Data Portability

7. GOVERNANCE

• This Policy supports:
• DPDP Act 2023
• GDPR
• ISO 27001
• ISO 27701

8. COMMITMENT

Data shall not be retained longer than necessary.