{"id":558,"date":"2025-10-30T10:26:57","date_gmt":"2025-10-30T10:26:57","guid":{"rendered":"https:\/\/tenaxholdings.com\/marine\/?page_id=558"},"modified":"2025-10-30T10:31:02","modified_gmt":"2025-10-30T10:31:02","slug":"data-retention-policy","status":"publish","type":"page","link":"https:\/\/tenaxholdings.com\/marine\/data-retention-policy\/","title":{"rendered":"Data Retention Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Data Retention Policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
1. <\/span>INTRODUCTION <\/span><\/strong><\/div>

Tenax Marine Limited (\u201cthe Company\u201d, \u201cwe\u201d or \u201cus\u201d) is committed to responsible management of personal data, in line with the <\/span>Nigeria Data Protection Act 2023<\/span> (\u201cNDPA\u201d), the <\/span>Nigeria Data Protection Regulation (NDPR) 2019<\/span>, and global best practices.<\/span><\/p>

This Policy establishes the standards for retaining, reviewing, and securely disposing of personal data collected, stored, and processed by the Company. It ensures that data is kept only for as long as necessary for legitimate business, contractual, or legal purposes, and that the rights of data subjects are respected<\/span><\/p>

In tandem with <\/span>the Data Protection Legislation<\/span>(s)<\/span>, “<\/span>P<\/span>ersonal <\/span>D<\/span>ata” <\/span>refers<\/span> to<\/span> any information pertaining to an identified or identifiable natural person (referred to as a “Data Subject”). An identifiable natural person is someone who can be directly or indirectly identified, typically by means of a name, identification number, location data, online identifier, or other factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.<\/span><\/p>

Under the Data Protection Legislation<\/span>(s)<\/span>, <\/span>Personal Data must<\/span> be stored in a manner that allows for the identification of data subjects only for as long as necessary to fulfill the purposes for which it was collected. However, there are exceptions to this rule. <\/span>Personal <\/span>Data may<\/span> be retained for longer periods if it is intended for archiving purposes that serve the public interest, scientific or historical research, or statistical analysis. In such cases, the retention of data must adhere to the appropriate technical and organizational measures outlined in the Data Protection Legislation to ensure the data’s protection and security.<\/span><\/p>

Furthermore<\/span>, <\/span>the Data Protection Legislation<\/span>(s)<\/span>, grants individuals the right to erasure, commonly known as “the right to be forgotten.” This right allows data subjects to request the deletion of their <\/span>Personal Data <\/span>and to halt its processing under the following circumstances:<\/span><\/p>

a. <\/span>When <\/span>Personal<\/span> Data <\/span>is no longer necessary for its original purpose of collection or processing<\/span> (see above<\/span>);<\/span>\u00a0<\/span><\/div>
b. <\/span>When the data subject withdraws their consent<\/span> for <\/span>processing<\/span>;<\/span>\u00a0<\/span><\/div>
c. <\/span>When the data subject objects to the processing of their <\/span>Personal Data <\/span>and the Company has no overriding legitimate <\/span>interest;<\/span>\u00a0<\/span><\/div>
d. <\/span>When the <\/span>Personal Data is<\/span> processed unlawfully (i.e. in breach of the Data Protection Legislation<\/span>s<\/span>);<\/span>\u00a0<\/span><\/div>
e. <\/span>When the <\/span>Personal Data <\/span>has<\/span> to<\/span> be erased to comply with a legal obligation.\u00a0<\/span>\u00a0<\/span><\/div>

\u00a0<\/p>

This policy outlines the types of <\/span>Personal Data collected<\/span> by the Company for its services, along with the duration of retention, criteria for establishing and reviewing retention periods, and procedures for deletion or disposal. <\/span><\/p>

For additional details on data protection and compliance with Data Protection Legislation, please consult the Company’s <\/span>Privacy <\/span>Policy.<\/span><\/p>

2. <\/span>S<\/span>COPE<\/span><\/strong><\/div>
2.1. This Policy applies to all <\/span>P<\/span>ersonal <\/span>D<\/span>ata processed by the Company <\/span>in the course of<\/span> its business operations, whether collected directly or indirectly, and regardless of format (electronic, paper, or otherwise)<\/span>.<\/span><\/strong><\/div>
2.2. It also applies to all employees, contractors, third-party service providers, and business partners who process <\/span>P<\/span>ersonal <\/span>D<\/span>ata on behalf of the Company<\/span><\/div>
2.3. Personal data, as held by the above is stored in the following ways and in the following locations:<\/span>\u00a0<\/span><\/div>
a. <\/span>The Company\u2019s servers<\/span> and secure <\/span>databases<\/span>;<\/span>\u00a0<\/span><\/div>
b. <\/span>Third-party servers, operated by third-party service providers engaged by the <\/span>Company;<\/span>\u00a0<\/span><\/div>
c. Computers <\/span>owned laptops, desktops and mobile <\/span>devices<\/span>;<\/span>\u00a0<\/span>\u00a0<\/span><\/div>
d. Laptop, computers and other mobile devices provided by the Company to its <\/span>employees;<\/span>\u00a0<\/span><\/div>
e. Computers and mobile devices owned by employees, agents, and sub-contractors used in accordance with the Company\u2019s Bring Your Own Device (\u201cBYOD\u201d) <\/span>Policy<\/span>;<\/span>\u00a0<\/span><\/div>
f. Physical records <\/span>held in secure storage within Company <\/span>premises.

<\/span><\/div>
3. <\/span>A<\/span>IMS AND OBJECTIVES<\/span>\u00a0<\/span><\/strong><\/div>

This Policy is designed to:<\/span><\/p>

a. This Policy aims to provide clear guidelines for the retention and management of <\/span>P<\/span>ersonal <\/span>D<\/span>ata, ensuring the Company’s strict compliance with data protection regulations and respecting the rights of data subjects, including their right to erasure. The Policy is designed to guarantee the Company’s full adherence to its data protection obligations, as outlined in the Data Protection Legislation, and to protect the privacy and rights of data subjects.<\/span><\/div>
b. This Policy further aims to harmonize the Company’s data management practices with its obligations under the Data Protection Legislation, by implementing efficient data retention and disposal procedures that prevent data accumulation, promote data quality, and ensure the timely disposal of unnecessary data, thereby streamlining data management processes and reducing associated risks.<\/span><\/div>
c. Guarantee<\/span> timely and secure disposal of data <\/span>no<\/span> longer required<\/span><\/div>
d. Promote transparency and respect for data subject rights, including the right to erasure<\/span>.<\/span><\/div>
e. Protect the Company from regulatory, operational, and reputational risk<\/span>s.

<\/span><\/div>
4. <\/span>D<\/span>ATA SUBJECT RIGHTS AND DATA <\/span>RETENTION<\/span><\/strong><\/div>
4.1. All <\/span>Personal Data held<\/span> by the Company is held in accordance with the requirements of the Data Protection Legislation<\/span>s<\/span> and data subjects\u2019 rights thereunder, as set out in the Company\u2019s <\/span>Data <\/span>Privacy<\/span> Policy.<\/span>\u00a0

<\/span><\/div>
4.2. At the <\/span>point<\/span> of collecting the data, data subjects shall be\u00a0fully informed of their rights, of what <\/span>Personal Data the<\/span> Company holds about them, how that <\/span>Personal Data is<\/span> used, and how long the Company will hold that <\/span>Personal Data<\/span> (or, if no fixed retention period can be determined, the criteria by which the retention of the data will be determined).<\/span>\u00a0

<\/span><\/div>
4.3. In addition to the above, data subjects are given control over their <\/span>Personal Data held<\/span> by the Company including the right to have incorrect data rectified, the right to request that their <\/span>Personal Data<\/span> be <\/span>deleted or otherwise disposed of (notwithstanding the retention periods otherwise set by this Policy), the right to restrict the Company\u2019s use of their personal data, the right to data portability,<\/span> and further rights as set out in the Company\u2019s <\/span>Data <\/span>Pr<\/span>ivacy<\/span>Policy.

<\/span><\/div>
4.4. Personal data shall not be retained for longer than necessary to fulfil the purpose for which it was collected, except where a longer retention period is required by:<\/span><\/div>
a. Legal or regulatory obligations<\/span>.<\/span><\/div>
b. Contractual obligations<\/span>.<\/span><\/div>
c. The establishment, exercise, or defence of legal claims<\/span>.<\/span><\/div>
d. Archiving in the public interest, scientific or historical research, or statistical purposes (with safeguards in place)<\/span>.

<\/span><\/div>
4.5. Where no precise retention period can be fixed, retention shall be determined by criteria including:<\/span><\/div>
a. The nature of the personal data<\/span>.<\/span><\/div>
b. The purpose of processing<\/span>.<\/span><\/div>
c. Risks associated with retaining or deleting the data<\/span>.<\/span><\/div>
d. Legal and contractual requirements.

<\/span><\/div>
4.6. Retention schedules shall be reviewed periodically to ensure ongoing compliance

<\/span><\/div>
5. <\/span>T<\/span>ECHNICAL <\/span>AND ORGANISATIONAL <\/span>SAFEGUARDS<\/span><\/strong><\/div>

The Company adopts reasonable technical and organizational measures to secure personal data throughout its lifecycle, including:<\/span><\/p>

a. <\/span>Encryption of electronic data at rest and in transit.<\/span><\/div>
b. <\/span>Strong access control measures and authentication protocols.<\/span>\u00a0<\/span><\/div>
c. <\/span>Confidential marking of sensitive data.<\/span><\/div>
d. <\/span>Prohibition of unauthorized transfer of personal data.<\/span><\/div>
e. <\/span>Regular system backups stored securely in encrypted form.<\/span><\/div>
f. <\/span>Secure transfer and destruction methods for both physical and electronic records.<\/span><\/div>
g. <\/span>Employee awareness and training on date retention practices.<\/span><\/div>

The Company is not liable for any unauthorized access, alteration, or loss of personal data that arises from circumstances beyond <\/span>its reasonable<\/span> control, including but not limited to cyberattacks, third-party misconduct, or force majeure events<\/span>.<\/span>\u00a0<\/span>\u00a0<\/span><\/p>

6. <\/span>D<\/span>ATA DISPOSAL<\/span>\u00a0<\/span><\/strong><\/div>

Upon the expir<\/span>ation<\/span> of the data retention periods, or when a data subject <\/span>validly <\/span>exercises their right to <\/span>erasure<\/span>, <\/span>the Company will securely dispose of such data as <\/span>follows:<\/span>\u00a0<\/span><\/p>

a. Personal Data stored<\/span> electronically (including <\/span>any and all<\/span> backups thereof) shall be deleted<\/span>.<\/span><\/div>
b. Personal Data stored<\/span> in hardcopy form shall be shredded<\/span> or destroyed using secure disposal processes.<\/span><\/div>
c. Persona Data contained in third party systems shall be authorized to be deleted with confirmation of such deletion obtained from the relevant third party or service provider.

<\/span><\/div>
7. R<\/span>O<\/span>LES AND RESPONSIBILITIES<\/span>\u00a0<\/span>OF THE DATA PROTECTION OFFICER<\/span><\/strong><\/div>
7.1. <\/span>The Company\u2019s Data Protection Officer <\/span>(DPO) <\/span>is<\/span> responsible for<\/span>.<\/span><\/div>
a. The D<\/span>PO<\/span> shall be responsible for overseeing the implementation of this Policy and for monitoring compliance with this Policy, the Company\u2019s other Data Protection-related policies (including, but not limited to, its <\/span>Privacy<\/span> Policy), and with the Data Protection Legislation.<\/span>\u00a0<\/span><\/div>
b. The D<\/span>PO<\/span> shall be directly responsible for ensuring compliance with the above data retention periods throughout the Company.<\/span>\u00a0<\/span><\/div>
c. Any questions regarding this Policy, the retention of personal data, or any other aspect of Data Protection Legislation compliance should be referred to the D<\/span>PO. <\/span><\/div>
d. Acting as the primary point of contact for data subjects request and NDPC inquires.

<\/span><\/div>
8. I<\/span>MPLEMENTATION OF POLICY <\/span>AND REVIEW<\/span><\/strong><\/div>

This Policy shall be deemed effective as of <\/span>XXXX<\/span>.<\/span> No part of this Policy shall have retroactive effect and shall thus apply only to matters occurring on or after this date. The Company reserves the right to review this Policy <\/span>periodically and updated where necessary to reflect changes in business practices, technology, or legal\/regulatory requirements<\/span>.<\/span><\/p>

This Policy has been approved and authorised by:<\/span>\u00a0<\/span><\/p>

Name:\u00a0<\/span>\u00a0<\/span><\/p><\/div><\/td>

\u00a0<\/p><\/div><\/td><\/tr>

Position:<\/span>\u00a0<\/span><\/p><\/div><\/td>

\u00a0<\/span><\/p><\/div><\/td><\/tr>

Date:<\/span>\u00a0<\/span><\/p><\/div><\/td>

\u00a0<\/p><\/div><\/td><\/tr>

Signature:<\/span>\u00a0<\/span><\/p><\/div><\/td>

\u00a0<\/span><\/p><\/div><\/td><\/tr><\/tbody><\/table>

\u00a0<\/span><\/p>

\u00a0<\/span><\/p>

SCHEDULE I<\/span>\u00a0<\/span>\u2013<\/span> DATA RETENTION SCHEDULE<\/span><\/p>

UNIT<\/span><\/p><\/div><\/td>

RECORD TYPE<\/span><\/p><\/div><\/td>

RETENTION PERIOD<\/span><\/p><\/div><\/td><\/tr>

Employee Records<\/span><\/p><\/div><\/td>

Duration of employment and <\/span>7 years<\/span> thereafter<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Recruitment Records<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Training and Learning Development Records<\/span><\/p><\/div><\/td>

Duration of employment and <\/span>7 years<\/span> thereafer<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Consent Records<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Performance review records\/Promotions<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Medical Records<\/span><\/p><\/div><\/td>

7years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Insurance records<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

Procurement<\/span><\/p><\/div><\/td>

Purchase orders, Quotations and Payment Records<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Vendor Management Records <\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Payment on Delivery Records<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

SLAs with Suppliers<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Transfer payments<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

Finance <\/span>and Accounting Records<\/span><\/p><\/div><\/td>

Vendor Invoices<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Payroll Records and Summaries<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Tax returns and worksheets and other documents relating to determination of tax liability<\/span><\/p><\/div><\/td>

7years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Financial Statements (year-end)<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Pension Records <\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

Marine Operations Data<\/span><\/p><\/div><\/td>

Crew List<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Manifests<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Vessel Logs with personal data<\/span><\/p><\/div><\/td>

7 years<\/span><\/p><\/div><\/td><\/tr>

Compliance and Regulatory Filings<\/span><\/p><\/div><\/td>

Permits<\/span><\/p><\/div><\/td>

10<\/span> years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Statutory submissions<\/span><\/p><\/div><\/td>

10 <\/span>years<\/span><\/p><\/div><\/td><\/tr>

\u00a0<\/p><\/div><\/td>

Filings containing personal data<\/span><\/p><\/div><\/td>

10 <\/span>years<\/span><\/p><\/div><\/td><\/tr>

Litigation and Claims Records<\/span><\/p><\/div><\/td>

Data collected for legal disputes or insurance claims<\/span><\/p><\/div><\/td>

Until resolution of <\/span>claim and<\/span> 6 years thereafter<\/span><\/p><\/div><\/td><\/tr>

Marketing and Communications Data<\/span><\/p><\/div><\/td>

Email addresses, subscription preferences, client communications<\/span><\/p><\/div><\/td>

Until withdrawal<\/span> of consent\/unsubscribe<\/span><\/p><\/div><\/td><\/tr>

Health & Safety Data<\/span><\/p><\/div><\/td>

Medical fitness to work offshore, incident\/accident reports<\/span><\/p><\/div><\/td><\/tr><\/tbody><\/table>

\u00a0<\/p>

\u00a0<\/p><\/div><\/td><\/tr><\/tbody><\/table>

\u00a0<\/p><\/div><\/td>

5 years (unless<\/span> extended by law for<\/span> specific incidents)<\/span><\/p><\/div><\/td><\/tr>

IT and Security Logs<\/span><\/p><\/div><\/td>

Access logs, system usage, CCTV footage<\/span><\/p><\/div><\/td><\/tr><\/tbody><\/table>

\u00a0<\/p>

\u00a0<\/p><\/div><\/td><\/tr><\/tbody><\/table>

\u00a0<\/p><\/div><\/td>

CCTV: 90 days (unless required for investigation); System logs: <\/span>24<\/span>\u2013<\/span>36<\/span> months<\/span><\/p><\/div><\/td><\/tr><\/tbody><\/table><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Data Retention Policy 1. INTRODUCTION Tenax Marine Limited (\u201cthe Company\u201d, \u201cwe\u201d or \u201cus\u201d) is committed to responsible management of personal data, in line with the Nigeria Data Protection Act 2023 (\u201cNDPA\u201d), the Nigeria Data Protection Regulation (NDPR) 2019, and global best practices. This Policy establishes the standards for retaining, reviewing, and securely disposing of personal […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-558","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/tenaxholdings.com\/marine\/wp-json\/wp\/v2\/pages\/558","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenaxholdings.com\/marine\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/tenaxholdings.com\/marine\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/tenaxholdings.com\/marine\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tenaxholdings.com\/marine\/wp-json\/wp\/v2\/comments?post=558"}],"version-history":[{"count":4,"href":"https:\/\/tenaxholdings.com\/marine\/wp-json\/wp\/v2\/pages\/558\/revisions"}],"predecessor-version":[{"id":571,"href":"https:\/\/tenaxholdings.com\/marine\/wp-json\/wp\/v2\/pages\/558\/revisions\/571"}],"wp:attachment":[{"href":"https:\/\/tenaxholdings.com\/marine\/wp-json\/wp\/v2\/media?parent=558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}