Deleted data

A data subject can ask for their PII data to be deleted.

However, legal reasons may prevent you from deleting PII data. For example, you may have to keep records of transactions, agreements, and so on. In that case, you can keep the PII data, but you need to inform the data subject as to why you need to keep it and for how long. During that time, you cannot use the data for marketing purposes.

When deleting the PII data of a data subject, you must inform the data subject that the data was deleted.

Also, suppose you share PII data with other data controllers or data processors, and a data subject asks you to delete their data. In that case, you are responsible for asking the other data controllers or processors to delete that data, too.