Customer data can only be retained for the purpose for which it was collected. Once that purpose is fulfilled or consent is withdrawn, the data must be deleted unless there is a valid legal reason to retain it.
Was this answer helpful?
Our team is here to help you with any questions about DPDP compliance.