6.1. The Service Provider shall take all necessary measures within its control to store, protect, and prevent the disclosure of the Client's personal information during the period the Client uses the Platform.

6.2. The Service Provider shall retain the Client's personal information for a minimum of 10 years from the date of account closure or the date of revocation of consent to collect personal information, whichever is later, in accordance with relevant legislation.