Growth · Measurement and evidence · 08
Data retention and privacy
Data retention and privacy in measurement ensures that the data collected to measure a growth program, from analytics and call tracking to inquiry records and measurement exports, is collected lawfully, kept only as long as it is needed, protected while it is held, and documented so the organization’s privacy program can account for it. It is needed because measurement data includes personal data, because privacy law applies to visitors, callers and inquirers, because measurement tools accumulate data nobody planned to keep, and because a growth program run by an assurance firm should meet the standard the assurance side would audit. The work produces the data inventory for measurement, retention schedules and their implementation, access controls and processing records, and the documentation that feeds the organization’s privacy evidence.
Scope
What the review covers.
- Inventory of measurement data: analytics, call tracking, inquiries, exports, dashboards
- Lawful basis and consent where required
- Retention schedules and implementation per source
- Access control and protection of measurement data
- Vendor and tool terms for measurement platforms
- Processing records for the privacy program
Deliverables
What you receive.
| Deliverable | Form |
|---|---|
| Measurement data inventory | What is collected, where, why |
| Retention implementation | Schedules applied per source |
| Access and protection record | Who can reach what |
| Processing records | For privacy evidence |
Prerequisites
What we need from you.
- The measurement stack in place
- The privacy requirements that apply to visitors and inquirers
- Counsel or compliance for lawful basis determinations
Related
Where this sits.
- Measurement and evidence Service
- Growth Hub
- Reporting for boards and investors Also
- Baseline audit Also
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days
Questions
Asked before engaging.
Does measurement really involve personal data?
Call recordings, inquiry forms and some analytics identifiers are personal data. Treating them as such is both lawful and credible.
Will retention limits reduce what we can measure?
Aggregated trends are retained; raw personal data is not kept beyond its purpose. Trends do not need the raw data forever.
How does this connect to the privacy service?
It is the measurement-specific application of the same discipline. See Privacy and data governance.