Business

Destroying freelancer records: retention periods and safe clear-out

28 June 2026 · 10 min read · DeSnipperaar

As a freelancer you are your own bookkeeper, archivist and privacy officer all at once. Meanwhile the records grow steadily, often in a corner of the living room or up in the attic. Invoices, quotes, contracts, bank statements and tax papers pile up, and at some point you no longer know what to keep and what can go. On top of that, business and private easily blur in a sole proprietorship, which makes clearing out extra tricky.

This article explains how long you must keep your records, which documents should be destroyed confidentially and how to arrange that safely, even when you work from home. That keeps your archive manageable and you GDPR-proof without it costing much time.

Which records does a freelancer have?

• Sales and purchase invoices with names, addresses and amounts.
• Quotes and contracts with client data and arrangements.
• Bank statements and payment overviews.
• Tax returns for income and VAT.
• Time and mileage records.
• Correspondence with clients and the tax authority.

It looks like a lot, but most of it falls under a few categories. Once you know which documents fall under the tax retention obligation and which do not, clearing out becomes a lot clearer. The rest of this article helps you make that distinction.

Retention periods in a table

Business owners have a tax retention obligation. The basic records you keep for 7 years, some documents longer. The table below gives a practical guideline.

Document	Retention period	Note
Invoices, ledger, bank statements	7 years	Basic records
Data about real estate	10 years	Longer period
Contracts and quotes	Up to 7 years after end	Contains client data
Correspondence	No longer than needed	May contain personal data

A detailed overview per document type is in the retention periods cheatsheet and in how long to keep documents. The main rule is simple. What falls under your accounts you keep 7 years, the rest no longer than needed.

What the GDPR requires of a freelancer

A common misconception is that the GDPR only applies to big companies. As a freelancer too you process clients' personal data, and the same basic rules apply. Article 5 requires storage limitation, you do not keep data longer than needed for the purpose you collected it for. Article 32 requires appropriate measures to protect that data. That duty runs until a document is destroyed beyond legibility. How this works out for SMEs and freelancers is in GDPR requirements for SMEs.

If you throw old invoices out unshredded with the waste paper, that is a data breach. A serious data breach you report within 72 hours to the data protection authority. For a sole trader that sounds heavy, but the solution is simple. Destroy documents with personal data carefully and the whole scenario never arises.

Which DIN level do you need?

How finely paper must be shredded is set out by the DIN 66399 standard in levels. For a freelancer these mainly matter.

Level	Particle size	Suitable for
P-2	Strips	General print without data
P-4	Small particles	Invoices, contracts, bank statements
P-5	Very small particles	Documents with ID numbers or special data

For ordinary records P-4 is the workable minimum. If there is an ID number on it, for example on a tax document, P-5 is indicated. A cheap office shredder rarely reaches that high level, professional destruction does.

Working from home, clearing out at home

Most freelancers work from home, and that is exactly where business and private blur. A forgotten folder of client invoices soon lies next to the private post on the kitchen table. So make a clear separation. Keep business documents in their own folder or lockable drawer and do not throw confidential paper out with your own waste paper. How you tackle that at home is in destroying confidential documents at home. For a little paper a month a good shredder is enough, but when clearing out years of records, having it collected is faster and safer.

Destroy yourself or have it collected?

The trade-off is simple for a freelancer. A few sheets a week you shred yourself, but as soon as it is boxes at a time, for example after the 7-year period expires, an office shredder jams. Then having it collected is more practical. A certified party collects the boxes, destroys them to the right DIN level and gives you a certificate. You are done in a few minutes instead of spending half a day shredding. The cost is modest, see what does archive destruction cost.

What if it goes wrong? A data breach at a freelancer

Imagine you clear out and throw a stack of old invoices and an expired contract out with the waste paper at the kerb. They hold names, addresses and amounts of your clients. A neighbour or passer-by can simply take them. That is a data breach, even though you are only a sole trader. You assess whether it poses a risk to your clients and report it within 72 hours where needed. With a lockable bin for paper to be destroyed and a periodic collection you prevent that from happening.

Digital records and data carriers

A large part of your records is digital, in an accounting package, in the cloud or on an old laptop. If you work with an online service, check whether there is a processing agreement, because you remain responsible for your clients' data. If you replace your laptop or external drive, hand over the old carrier for physical destruction, because deleting a file does not really remove the data. The approach is in data destruction. Paper and data carriers can come along in the same collection.

Costs and process: what can you expect?

Having it destroyed is affordable for a sole trader too. You pay a fixed price per box, known in advance, with no surprises afterwards. Within 20 km of Amsterdam we charge no call-out fee. The process costs you hardly any time. You tell us how many boxes you have, plan a collection that suits you and we collect it at your home address or office. After that everything is destroyed to the agreed DIN level and recycled, with a certificate within a few working days. For most freelancers one collection a year is ample.

Periodic or one-off collection?

For most freelancers a one-off collection is enough when the retention period of a few years' records expires at once. If you have a lot of paper client contact, a fixed arrangement can be handier, for example a collection at every year-end. You then tie the clear-out to the moment you close your books anyway. That keeps the archive manageable and you never have to empty a whole attic in one go.

In doubt whether something can go?

It is not always immediately clear whether a document falls under the retention obligation. The rule of thumb helps, everything that is part of your accounts you keep seven years, counted from the end of the financial year. An invoice from 2017 may therefore go from 2025. In doubt about a specific document, check the cheatsheet or keep the document aside a while longer until you are sure. Destroying too early can be awkward in a tax audit, keeping too long conflicts with storage limitation. The golden mean is an annual clear-out where you always have the oldest year that is past the period destroyed.

What does a client expect of you?

Clients often choose a freelancer precisely for the personal contact and the trust. Part of that trust is that you handle their data carefully. A client who notices you manage quotes, contracts and invoices tidily and destroy them in time feels taken seriously. For larger clients it is sometimes even a condition, they ask in a processing agreement how you handle their data. A certificate of destruction then shows that you have it well arranged.

What if the tax authority comes by?

A tax audit is a bogeyman for many freelancers, but with orderly records it is manageable. The tax authority can request documents up to seven years back, so as long as you keep that period tidily, you are fine. That is exactly why it is wise not to destroy too early. Keep the past seven financial years complete and only destroy what falls outside that. A certificate of destruction also shows that you did not simply lose older documents, but had them destroyed deliberately and carefully. That is tidier than a box that has vanished without trace.

Practical tips for your home office

• Keep a separate folder for business documents, apart from your private post.
• Tie clearing out to the year-end, so it has a fixed moment.
• Set out a lockable bin for paper that must be destroyed.
• Think of data carriers, such as an old laptop or USB stick with client files.
• Keep the certificates with your records for the tax authority.

Common mistakes

• Invoices with the waste paper. With client names and amounts that is a data breach.
• Keeping everything indefinitely. After the retention period, keeping is only risk without use.
• Mixing business and private. Keep them separate and you clear out faster and safer.
• Forgetting the old laptop. It holds years of client data just as much.

Arranged in 4 steps

1. Take stock. Gather all your business records in one place.
2. Separate keep from destroy. Keep the past 7 years apart, the rest can go.
3. Destroy confidentially, a few sheets yourself and boxes at a time via a collection.
4. Keep the certificate with your records as proof.

The proof: certificate of destruction

After a collection you receive a certificate of destruction with the date, quantity and DIN level. For a freelancer that is handy proof towards the tax authority or a client asking what happened to their data. Keep it with your records, together with the serial numbers of any destroyed data carriers.

Frequently asked questions

How long must a freelancer keep records?

The basic records such as invoices, ledger and bank statements you keep for 7 years. Data about real estate has a 10-year period.

Can I just bin old invoices after 7 years?

Binning is fine, but not unshredded. Invoices contain names, addresses and sometimes ID numbers, so they should be destroyed confidentially.

I work from home, how do I clear out safely?

Keep business documents separate from private ones and in a lockable drawer. For a large pile have it collected and destroyed, with a certificate as proof.

Does my client data fall under the GDPR?

Yes. As a freelancer too you process clients' personal data and must protect it and destroy it in time, just like a larger company.

Which DIN level do I need?

For ordinary records DIN 66399 P-4 is the workable minimum. For documents with an ID number P-5 is indicated.

Can I have paper and my old laptop destroyed together?

Yes. Paper and data carriers come along in the same collection and are each destroyed to their own level, with serial numbers on the certificate.

Conclusion

As a freelancer you are responsible for your own records and your clients' privacy. Keep what is needed for tax, seven years for the basic records, and destroy the rest carefully. Keep business and private separate, do not forget the old laptop and have a large pile collected in one go, with a certificate as proof. That keeps your home office tidy and GDPR-proof without it costing you a weekend. A fixed working method turns an annoying chore into a routine of a few minutes a year. Your clients then know their data is in good hands with you.

---

Ready to clear out your freelancer records? Request a quote via desnipperaar.nl or see how to have paper shredded. Within 5 minutes you have a fixed price.