01Website inquiries and unassigned requests
Email drafts are created on the user's device and become company records only if the user sends them or otherwise communicates the information. An ordinary website service, commercial, career-interest, or feedback inquiry may be retained for up to one year to respond, document status, investigate misuse, correct records, or address a complaint, unless it becomes part of another record category or an earlier deletion is appropriate.
02Actual service, billing, and account records
A completed or attempted assignment may create dispatch, authorization, estimate, location, vehicle, condition, photograph, communication, route, destination, invoice, payment, cancellation, complaint, insurance, and safety records. A commercial or credit process may create application, decision, agreement, requester, invoice, payment, dispute, suspension, and closure records. Those records can require longer retention than a website inquiry.
03Custody, storage, release, and statutory records
Custody and release records can include ownership or lien authority, notices, tow and storage facts, agency records, personal property, condition, charges, payment, release, disposition, and correspondence. Missouri law specifies multi-year recordkeeping for certain covered abandoned-property situations; that requirement is not generalized to every voluntary tow or Kansas record, and a longer lawful hold may apply to a particular vehicle.
04Employment, insurance, tax, and legal matters
General career interest should not contain unnecessary sensitive data. A future real application, employment record, insurance matter, tax or accounting record, claim, subpoena, investigation, court case, regulatory matter, or legal hold may have its own access and retention period. Relevant records should not be destroyed merely because the ordinary website-request period expires.
05Access, correction, deletion, and exceptions
A person may call or email to ask about information they submitted and request correction or deletion. Tommy's may reasonably verify identity and authority, identify the applicable record, correct inaccurate data, and explain when deletion is limited by another person's rights, contract, payment, custody, insurance, fraud prevention, safety, backup integrity, legal hold, law, or inability to locate the record from the information supplied.
06Security, review, and disposal
Records should be classified, access-limited, protected according to sensitivity, reviewed against the schedule, and disposed of securely when no business or legal need remains. Service providers should receive only the access and duration reasonably needed for their function. Backups and archives may follow controlled overwrite or destruction cycles rather than immediate record-by-record deletion.