Even when a user's Personal Information is deleted, FR may continue to hold statistical data that does not fall under the category of Personal Information or is generated from such user's Personal Information in a manner that reasonably ensures security within the minimum necessary limits for legitimate business purposes such as analysis.