Data deletion requests

1. Who holds your data

BarakahX is supplied to professional services firms. Most of the personal data in the service was placed there by one of those firms, about its own clients and its own staff. For that content the firm is the controller and we are the processor, which means we hold the data on the firm’s behalf and act only on its instructions.

So if you dealt with a firm that uses BarakahX rather than with us directly, that firm decides what happens to your data. Write to us anyway. We will pass your request to the firm and help it respond.

We are the controller in our own right for a narrower set of records: enquiries sent to us, our marketing contacts, and the account records of people at customer firms who use the service. Our privacy policy explains the distinction in full, along with the other rights you have over your data.

2. How to ask

Email privacy@barakahx.com and tell us:

• your name, and any other name your records might be held under;
• the name of the firm you dealt with, which is the one detail we cannot work around;
• an email address or telephone number that firm is likely to hold for you;
• what you would like deleted, if it is not everything.

Naming the firm matters more than anything else on that list. Each firm’s data is held separately from every other firm’s, so without the name we have nowhere to look. We may also ask you for information to confirm your identity, so that we do not delete or disclose the wrong person’s records.

3. What happens next

We acknowledge every request when it arrives, and we action it within 30 days of having what we need to identify you. Where the firm is the controller, we pass the request on promptly and act on the firm’s instruction within the same period. If a request is unusually complex, the UK GDPR allows that period to be extended, and we will tell you inside the first 30 days if that happens.

Deletion is not always absolute. We may have to keep some records to meet a legal duty, for example:

• invoices and accounting records, for 6 years from the end of the accounting period they relate to, as required by UK tax law;
• records a firm must retain under its own regulatory duties, such as anti money laundering rules;
• records needed to establish, exercise or defend a legal claim, for as long as that claim is live.

Where we have to keep something, we will tell you what it is and why. We also keep a minimal record of the fact that you asked, so that you are not added back later by mistake.

4. If you are not satisfied

Tell us first at privacy@barakahx.com so that we have a chance to put it right. You can also complain to the Information Commissioner’s Office at any time. The contact details are in section 12 of our privacy policy.