Personal data is stored only for the legally required period, then securely deleted. It is never repurposed for marketing or shared with third parties without consent.