School Data Retention at Wonde

In this document we will detail our retention periods for data obtained from schools by Wonde. This document does not replace Wonde’s Data Retention Policy, which we can provide on request.

• School Data in this case refers to data obtained by Wonde through the use of our API or installed Wonde client and refers to data that schools have approved to be shared with authorised third party applications.
• Account Data refers to data belonging to individuals that have an active Wonde account at a school, application or enterprise.

Our Deletion Triggers

Individual data sets will be retained for the duration that a school has an active application that utilises that data set. Data will begin to be deleted in line with our retention periods once a school no longer has any active connections

Our Retention Periods

School Data

Extracts from a School’s MIS are retained for a period of 7 days within Wonde’s environment. Data is then stored within a back-up for a period of 10 further days. This means that our total retention period, following a school disconnecting all Wonde connections, is 17 days.

Account Data

User data, including names, email addresses and contact information, is retained for the duration that a school has an active connection via Wonde. Once a school no longer has any Wonde connections, personal data from their account is deleted following a 24 month period of no engagement.

Change history

Date	Comments	Author	Approver	Version
Oct 2025	Document creation	Data Protection Officer	Director of Information Security	1.0