Free trial
Colour

A customer asks for their data or to be forgotten

Log the request, check who is asking, export the data or erase it, keep the records the law requires, and confirm to the customer.

For
OwnerAdministrator
Hosting
Any hosting
Devices
Web browserServer
Business
All businesses

Checked against Pop Dispatch 0.1.0

Situation #

A customer, driver, staff member or rider writes or calls and asks what you hold about them, asks you to correct it, or asks you to delete it.

What keeps working #

  • Dispatch, invoicing, the yard and the board run as usual while you handle the request.
  • Reading and exporting data never changes a record.

Steps in order #

  1. Note when the request arrived and how. Check the person's identity in the way your policy sets.
  2. Open Privacy, then Person data. Search and open the person.
  3. Under Log a request, choose the kind, set the due date for the law that applies to you and save. The row shows in Request log.
  4. Check for a reason to wait: an open dispute, a claim, an unpaid invoice or a vehicle still in the yard. Place a hold if a matter is open. See erase-a-person-and-legal-holds.
  5. For a copy of the data: choose Export their data, download the JSON file and the PDF and send them to the person.
  6. For a correction: change the record on its own screen (customers, people or the job) and mark the request done.
  7. For erasure: choose See what would be erased and read the table with the reasons. Share it with your adviser if a record is unclear. Choose Erase now and confirm.
  8. Download the confirmation for the person and send it. It lists what was erased and what was kept, and why.
  9. Mark the request done in the Request log.

How to confirm it worked #

  • The request shows Done in Request log, before its due date.
  • After an erasure, searching for the person finds a record named "Erased" with no contact details, and their invoices still add up.
  • The screen reported that the audit log still checks out.
  • A marketing look-up for their email or phone shows an opt-out.

What to do afterwards #

  • Tell the person which records were kept and why, using the confirmation PDF.
  • Remove the person from any list kept outside Pop Dispatch, such as a spreadsheet or an email program.
  • Backups made before the erasure still hold the old data until they expire. Keep that in mind when you restore from one: erase the person again after a restore.
  • Review your retention settings so older data leaves on its own. See retention-settings.