Last updated: [CONFIRM: set to launch date]
Under the UK General Data Protection Regulation (UK GDPR) you have the right to ask us to erase the personal data we hold about you. This is often called the right to be forgotten. This page explains how to make that request and what happens next.
When the Right Applies
You can ask us to erase your personal data where:
- The data is no longer needed for the purpose we collected it for
- You withdraw consent and we have no other legal basis for keeping it
- You object to our processing and there is no overriding legitimate reason to continue
- The data has been processed unlawfully
- We have a legal obligation to erase it
When We May Not Be Able to Erase Data
The right is not absolute. We may need to keep certain information where we have a legal obligation to retain it, or where we need it to establish, exercise or defend legal claims. This includes records relating to contracted services, invoicing and accounting. If we cannot erase your data, we will explain why.
How to Make a Request
Email info@outsourced-it.co.uk with the subject line “Erasure request”. [CONFIRM: correct email address for data requests]
Please include:
- Your full name and the contact details you believe we hold
- What data you would like erased, if it is not all of it
- Any context that helps us find your records, such as the date you contacted us
We may ask you for proof of identity before acting, to make sure we do not disclose or delete someone else’s data.
How Long It Takes
We will respond within one calendar month of receiving your request. If the request is complex we may extend this by up to two further months, and we will tell you if that happens.
Your Other Rights
You also have the right to access your data, correct inaccuracies, restrict or object to processing, and withdraw consent. See our Privacy Policy for the full list.
Complaints
If you are unhappy with how we have handled your request, you can complain to the Information Commissioner’s Office at ico.org.uk.