Data deletion

Your right to deletion

You can ask us to delete personal information we hold about you at any time. South African residents have this right under section 24 of the Protection of Personal Information Act, 2013. EU and UK residents have equivalent rights under Article 17 of the GDPR.

How to submit a request

Option 1 — Direct request

Email privacy@blueticked.com from the address on file. Tell us your account email or, for end-user contacts, the phone number or email you want removed.

Option 2 — Via Meta

If you connected to Blueticked through Meta's embedded signup (Facebook / WhatsApp Business), you can revoke us from your Business Integrations settings. Meta will notify us automatically and send you a confirmation link to app.blueticked.com/data-deletion-status where you can track progress.

Option 3 — From your dashboard

If you have a Blueticked account you can delete your workspace at any time under Settings → Account → Delete workspace. This triggers the same deletion pipeline as a direct request.

What happens when you request deletion

We process the request in three steps:

1. Verification. We confirm the request comes from you (account holder, end-user contact, or authorised representative). This usually involves a one-time email or SMS verification.
2. Deletion. Once verified we remove personal information from production systems within 14 days. Encrypted backups are purged within 30 days as part of the rolling backup window.
3. Confirmation.You receive an email confirming completion. If you used the Meta-initiated flow, the status page updates from “received” to “completed”.

What we cannot delete immediately

We may need to retain some information to meet legal obligations or protect legitimate interests:

• Billing and tax records — retained for 5 years to comply with the Tax Administration Act and the Companies Act
• Suppression-list entries — phone numbers and email addresses on opt-out lists are retained indefinitely so we can continue to honour the opt-out
• Audit logs — security and access logs retained for 12 months to investigate fraud or unauthorised access

Where information is retained for these reasons, access is limited to authorised personnel and a strict legal-basis review.

Confirmation codes

Each request receives a unique confirmation code. Quote it in any follow-up correspondence. If you submitted via Meta, the code is shown on app.blueticked.com/data-deletion-status. If you submitted by email we will reply with one within 48 hours.

Questions or complaints

Contact our Information Officer at privacy@blueticked.com. If you are not satisfied with our response, you may lodge a complaint with the South African Information Regulator at inforegulator.org.za.