Data deletion

Your right to deletion

You can ask us to delete personal information we hold about you at any time. South African residents have this right under section 24 of the Protection of Personal Information Act, 2013. EU and UK residents have equivalent rights under Article 17 of the GDPR.

How to submit a request

Option 1 — Direct request

Email privacy@blueticked.com from the address on file. Tell us your account email or, for end-user contacts, the phone number or email you want removed.

Option 2 — Via Meta

If you connected to Blueticked through Meta's embedded signup (Facebook / WhatsApp Business), you can revoke us from your Business Integrations settings. Meta will notify us automatically and send you a confirmation link to app.blueticked.com/data-deletion-status where you can track progress.

Option 3 — From your dashboard

If you have a Blueticked account you can delete your workspace at any time under Settings → Account → Delete workspace. This triggers the same deletion pipeline as a direct request.

What happens when you request deletion

We process the request in three steps:

1. Verification. We confirm the request comes from you (account holder, end-user contact, or authorised representative). This usually involves a one-time email or SMS verification.
2. Deletion. Once verified we remove personal information from production systems within 14 days. Database backups roll off within 7 days, so a deleted record is gone from backups within that time.
3. Confirmation.You receive an email confirming completion. If you used the Meta-initiated flow, the status page updates from “received” to “completed”.

What we cannot delete immediately

We may need to retain some information to meet legal obligations or protect legitimate interests:

• Billing and tax records — retained for 5 years to comply with the Tax Administration Act and the Companies Act
• Suppression-list entries — phone numbers and email addresses on opt-out lists are retained indefinitely so we can continue to honour the opt-out
• Audit logs — records of who did what in a workspace are kept for the life of the workspace; API request logs are kept for 90 days

Where information is retained for these reasons, access is limited to authorised personnel and a strict legal-basis review.

Confirmation codes

Each request receives a unique confirmation code. Quote it in any follow-up correspondence. If you submitted via Meta, the code is shown on app.blueticked.com/data-deletion-status. If you submitted by email we will reply with one within 48 hours.

Questions or complaints

Contact our Information Officer at privacy@blueticked.com. If you are not satisfied with our response, you may lodge a complaint with the South African Information Regulator at inforegulator.org.za.