Common use of Deletion or return of Company Personal Data Clause in Contracts

Deletion or return of Company Personal Data. 10.1 Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days of the Cessation Date. 10.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 days 24 hours of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days 24 hours of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days 24 hours of the Cessation Date. 10.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 days 48 hours of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 9.1 Subject to sections 10.2 Sections 9.2 and 10.3 Vendor and each Vendor Affiliate 9.3 AccuRun shall promptly and in any event within 365 sixty (60) days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 9.2 Subject to section 10.3Section 9.3, Company may in its absolute discretion by written notice to Vendor AccuRun within 30 fifteen (15) days of the Cessation Date require Vendor and each Vendor Affiliate AccuRun to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by may be mutually agreed to between Company to VendorAccuRun; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate AccuRun shall comply with any such written request within 30 days forty-five (45) of the Cessation Date. 10.3 9.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate AccuRun shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 Vendor 9.4 Upon Company request, AccuRun shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 days of the Cessation DateSection 9.

Deletion or return of Company Personal Data. ‌ 10.1 Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days of the Cessation Date.Date.‌ 10.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose.purpose.‌ 10.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 30 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days of the Cessation Date. 10.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 days of the Cessation Date.

Deletion or return of Company Personal Data. ‌ 10.1 Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 30 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days of the Cessation Date.Date.‌ 10.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose.purpose.‌ 10.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 10.1. Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate A liate shall promptly and in any event within 365 30 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 10.2. Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate A liate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate A liate shall comply with any such written request within 30 days of the Cessation Date. 10.3 10.3. Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate A liate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 10.4. Vendor shall provide written certification to Company that it and each Vendor Affiliate A liate has fully complied with this section 10 within 30 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days of the Cessation Date. 10.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Persona l Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 days thirty (30) of the date of cessation of any Services involving the Processing of Company Personal Data (the "“Cessation Date"”), delete and procure the deletion of all copies of those Company Personal Data. 10.2 Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days thirty (30) of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days thirty (30) of the Cessation Date. 10.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 days sixty (60) of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 10.1. Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 30 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 10.2. Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days of the Cessation Date. 10.3 10.3. Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 10.4. Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 9.1 Subject to sections 10.2 9.2 and 10.3 9.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 days [DAYS] of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 9.2 Subject to section 10.39.3, Company may in its absolute discretion by written notice to Vendor within 30 days [DAYS] of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days of the Cessation Date. 10.3 9.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 9.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 9 within 30 days [DAYS] of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 12.1 Subject to sections 10.2 12.2 and 10.3 12.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 14 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 12.2 Subject to section 10.312.3, Company may in its absolute discretion by written notice to Vendor within 30 14 days of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days of the Cessation Date. 10.3 12.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 12.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 12 within 30 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 9.1 Subject to sections 10.2 9.2 and 10.3 9.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 days [DAYS] of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 9.2 Subject to section 10.39.3, Company may in its absolute discretion by written notice to Vendor within 30 days [DAYS] of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days of the Cessation Date.Date.‌ 10.3 9.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose.purpose.‌ 10.4 9.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 9 within 30 days [DAYS] of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 9.1 Subject to sections 10.2 9.2 and 10.3 9.3 Vendor and each Vendor Affiliate shall shall, at the request of Company, promptly and in any event within 365 days four weeks of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 9.2 Subject to section 10.39.3, Company may in its absolute discretion by written notice to Vendor within 30 days four weeks of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days four week of the Cessation Datedate of this request. 10.3 9.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 9.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 9 within 30 days four weeks of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 30 calendar days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days of the Cessation Date. 10.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 60 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 9.1 Subject to sections 10.2 Sections 9.2 and 10.3 Vendor and each Vendor Affiliate 9.3 ChallengeRunner shall promptly and in any event within 365 sixty (60) days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 9.2 Subject to section 10.3Section 9.3, Company may in its absolute discretion by written notice to Vendor ChallengeRunner within 30 fifteen (15) days of the Cessation Date require Vendor and each Vendor Affiliate ChallengeRunner to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by may be mutually agreed to between Company to VendorChallengeRunner; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate ChallengeRunner shall comply with any such written request within 30 days forty-five (45) of the Cessation Date. 10.3 9.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate ChallengeRunner shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 Vendor 9.4 Upon Company request, ChallengeRunner shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 days of the Cessation DateSection 9.

Deletion or return of Company Personal Data. 10.1 10.1. Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 60 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 10.2. Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 60 days of the Cessation Date. 10.3 10.3. Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 10.4. Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 65 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 12.1 Subject to sections 10.2 12.2 and 10.3 12.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 30 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 12.2 Subject to section 10.312.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 days of the Cessation Date. 10.3 12.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 12.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 12 within 30 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 10.1. Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate Affiliate shall promptly and in any event within 365 30 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 10.2. Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate Affiliate shall comply with any such written request within 30 days of the Cessation Date. 10.3 10.3. Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 10.4. Vendor shall provide written certification to Company that it and each Vendor Affiliate Affiliate has fully complied with this section 10 within 30 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 60 days of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 days of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within 30 45 days of the Cessation Date. 10.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 60 days of the Cessation Date.

Deletion or return of Company Personal Data. 10.1 Subject to sections 10.2 and 10.3 Vendor and each Vendor Affiliate shall promptly and in any event within 365 [ 30 days ] of the date of cessation of any Services involving the Processing of Company Personal Data (the "Cessation Date"), delete and procure the deletion of all copies of those Company Personal Data. 10.2 Subject to section 10.3, Company may in its absolute discretion by written notice to Vendor within 30 [ 10 days ] of the Cessation Date require Vendor and each Vendor Affiliate to (a) return a complete copy of all Company Personal Data to Company by secure file transfer in such format as is reasonably notified by Company to Vendor; and (b) delete and procure the deletion of all other copies of Company Personal Data Processed by any Contracted Processor. Vendor and each Vendor Affiliate shall comply with any such written request within [ 30 days ] of the Cessation Date. 10.3 Each Contracted Processor may retain Company Personal Data to the extent required by Applicable Laws and only to the extent and for such period as required by Applicable Laws and always provided that Vendor and each Vendor Affiliate shall ensure the confidentiality of all such Company Personal Data and shall ensure that such Company Personal Data is only Processed as necessary for the purpose(s) specified in the Applicable Laws requiring its storage and for no other purpose. 10.4 Vendor shall provide written certification to Company that it and each Vendor Affiliate has fully complied with this section 10 within 30 [ 90 days ] of the Cessation Date.