Data must be destroyed at the end of this period (i.e. 16/12/2019).  Data are anonymised, so there is no need for extra security measures, but the information given to participants promised this, so we are honouring that commitment.