Skip to main content

Data retention

Data retention ensures that unnecessary data is not kept on your system, and is beneficial to:

  • ensure compliance with data protection rules governing collected data
  • reduce exposed data in case of a security breach
  • reduce disk space usage
  • ensure recent form submissions are not lost in outdated ones

Jadu Central provides three ways of clearing down unnecessary data:

  1. Site-wide retention policies
  2. Form-specific retention policies
  3. Retention on submission

Site-wide data retention policies

Site-wide data retention policies are applied to all forms that do not have their own form-specific policies. Data retention will check for forms to clear down every ten minutes by default.

Managing site-wide data retention policies

Data retention policies are managed via the Forms menu.

If your account has permission to access Data retention, you navigate to it's management area by the following:

  1. Click the Forms icon in the left navigation bar. The Forms menu will open.
  2. Click the Data retention link.

Site-wide policies interface

Retention policy fields

When form isHow old a submission needs to be before data removal is triggered.
And has statusThe form statuses covered by this policy
Submission typeThe types of submission covered by this policy - internal, registered user or unregistered user submissions
RemoveThe type of data removed by the policy. See the note on data types below
ConfirmationConfirmation that the action of the policy is understood prior to being enacted.

Form-specific data retention policies

For some forms, it may be necessary to clear down submissions sooner than the defined site-wide policies would.

To configure form specific data retention:

  1. Navigate to the form record and open the Data Retention tab.
  2. Enable Override global policies
  3. Policies can now be created, edited and deleted in the same way as when creating site wide policies.

Form-specific policies interface

Retention on Submission

In rare cases, data submitted to a form may be so sensitive that it cannot be kept for any time at all. For such situations data retention on submission may be used to remove all user data once the form submission process completes. Reporting data is retained to allow investigation of any problem submissions.

Due to the destructive nature of retention on submission, there is no option to apply it site-wide. It should only be enabled once third-party integrations are set up and successfully tested.

To configure retention on submission:

  1. Navigate to the form record and open the Data Retention tab.
  2. Enable Override global policies and then enable Clear user data on submission in the Settings side bar.

When using retention on submission, it is important that the form has at least one third-party integration form action set up. Otherwise, the user's submission can never be processed. Example actions include Jadu Connect, custom CRM systems or even a simple email alert to a back office system.

Order of processing and action failure

Form actions are fired before data is removed, and Jadu Central will not clear down data unless all actions complete successfully. Any submission where an action has failed can then be processed manually, and cleared by a reporting data policy at a later date.

If used, the PDF Generation action will be fired before retention. If all actions complete successfully, the generated PDF will be cleared down, so the customer will be unable to download it via the confirmation page. It should instead be attached to an email alert sent from the form.

Any custom actions or existing CRM integrations will not prohibit retention on submission if they fail, unless custom development is undertaken.

Types of data

Reporting data

  • required by Jadu Central to all the user to continue completing the form
  • anonymous
  • safe to keep in the application for long periods
  • useful to remove after a long period to save disk space

User data

  • anything used to identify the user, or that belongs to the user. Such as the user's answers to form questions, any files uploaded to the form and the user's email if provided.
  • far more sensitive than reporting data
  • should be removed once it is no longer required in line with data protection legislation

Data removal scope

For reference, the table below shows the data that each removal type will clear.

DataCleared by 'User Data' policiesCleared by 'Entire Submission' policies
Personal data from form e.g. IP address, email addressYesYes
Answers to questions on the formYesYes
Any files uploaded as part of the form submissionYesYes
PDF generated as part of 'PDF Generation' actionYesYes
Record of emails sentYesYes
Record of submission to Jadu Connect, if in useYesYes
Record of form actions firedYesYes
Submission record (reference, date started and completed)NoYes
Jadu PayBridge order notes and customer information (if Jadu PayBridge is in use)YesYes
Jadu PayBridge order payee (if Jadu PayBridge is in use)YesYes
Jadu PayBridge order item (if Jadu PayBridge is in use)NoYes
Jadu PayBridge order (if order contains only one item)NoYes

Tips for setting up policies

  • It is not possible to create a user data policy that runs after a reporting data policy, and clears down forms of the same status and submission type. This is because the user data policy would never run - if the entire submission is removed there is no user data left.
  • Once a user data policy runs, any affected user forms will be in the 'Retentioned' state. If you wish to subsequently clear reporting data from these forms, the reporting data policy must apply to the 'Retentioned' status.
  • When setting up policies, Jadu Central may highlight one or more of them as redundant. To fix this, ensure that each status is only affected by (at most) one user data and one reporting policy. Also, when setting up user data policies, check that each user data policy run before any reporting data policy that clears forms of the same status and submission type.