Delete your data

Two ways to ask

Use the form on this page, or email admin@gyandatabit.com with the subject “Data deletion request”. Both reach the same monitored inbox. The form is the quicker route, because it records the request against our systems straight away and tells us which records to look in.

Who can ask

• An individual — for information about yourself, such as an enquiry you sent or a WhatsApp message to one of our business numbers.
• A business — for information about your business, if you are authorised to act for it.
• Someone acting for another person — if you can show you are entitled to make the request on their behalf.

Verifying who you are

Before we delete anything we confirm the request came from the person the records belong to, or from someone entitled to act for them. Usually that means replying from the email address or phone number we already hold. If we cannot match your request to a record, we may ask you for more detail — we will only ask for what we need, and we will not ask you for identity documents unless there is no other way to establish it.

We do this because deleting on an unverified request is itself a privacy failure: it would let one person erase another’s records.

What we can delete

Depending on what you have used, this can include:

• Website enquiries and estimates — your name, email, phone, business details, the estimate you were shown and anything you wrote to us.
• Marketing records — your subscription and consent record. Note that unsubscribing is separate and immediate: every marketing email has an unsubscribe link, and you can also unsubscribe here without making a deletion request.
• WhatsApp messages — messages you sent to one of our WhatsApp business numbers, held in our message relay against your sending number, and the corresponding records in the business console that receives them.
• Software accounts — if you have bought software from us, the customer account created for it, its sign-in details and the site activation records attached to your licence.

What we may have to keep

We cannot always delete everything, and we will tell you plainly when that applies. We may need to retain:

• Records of a purchase — order, payment and refund records, which we are required to keep for tax and accounting purposes, and which our payment processor keeps under its own obligations.
• Proof of a choice you made — a minimal unsubscribe record, kept precisely so that we do not email you again.
• Security and audit records — such as the keyed one-way hash of an IP address recorded with a form submission, kept to prevent abuse. These do not identify you on their own.
• Message delivery records — in our WhatsApp relay, the fact that a message was received and processed (its identifier, type and timestamps) is the record that stops the same message being handled twice. The message content itself is removed on the schedule described in our Privacy Policy.
• Anything we are required to keep, or entitled to keep, to establish or defend a legal claim.

How we handle your request, and how long it takes

A person reviews every request — there is no automated deletion behind this page, and we will not claim otherwise. We act on requests as soon as we reasonably can. If a request is complex, or touches records in more than one system, we will tell you that and say what to expect rather than leaving you waiting.

Australian privacy law treats three different requests differently, so it is worth being clear about which one you are making:

• Access — asking what we hold about you. We aim to answer within a reasonable period; the OAIC’s guidance is that for a private organisation a reasonable period should not exceed 30 calendar days.
• Correction — asking us to fix something that is wrong. The same guidance applies: a reasonable period, which should not exceed 30 calendar days.
• Deletion — asking us to remove it. Australian privacy law does not give a general right to erasure, and sets no deadline for one, so we will not pretend there is a statutory clock here. We handle deletion requests as a matter of our own policy, to the same standard and in the same timeframe we apply to the other two.

Separately from anything you ask for, the Australian Privacy Principles require personal information to be destroyed or de-identified once it is no longer needed for a purpose it may lawfully be used for. That obligation is ours, and it applies whether or not anyone asks.

If the privacy law of another country applies to you, it may give you rights and deadlines different from these. Nothing on this page reduces them.

Deleting WhatsApp data specifically

Our WhatsApp integration uses the official WhatsApp Business Platform. Two things are worth knowing:

• Your own copy is yours. Deleting a chat in WhatsApp on your phone removes it from your device. That is separate from the copy we hold, and it does not reach us — so if you want ours removed, ask us here.
• Tell us the number. Messages are stored against the number they came from, so giving us that number is how we find them.

What Meta itself holds about your WhatsApp account is governed by WhatsApp’s own privacy policy, and we cannot delete it on your behalf.

If you are not satisfied

Please contact us first so we can try to put it right. If you are still not satisfied, you can raise it with the Office of the Australian Information Commissioner. If you are outside Australia, the data protection authority where you live may also be able to help you.

For the full picture of what we collect and why, see our Privacy Policy and Terms of Use.