Right to delete data (right to be forgotten)
Purpose: This policy is established to ensure compliance of KEYTOM SERVICES with the Personal Information Protection and Electronic Documents Act (PIPEDA) of Canada and the European Union's General Data Protection Regulation (GDPR), specifically pertaining to the deletion of user accounts and associated personal data.
Reference: GDPR Article 17 & PIPEDA Principle 4.3.
Scope: This policy applies to all personal data processed by KEYTOM SERVICES related to user accounts within the EU.
User's Right to be Forgotten:In compliance with GDPR Article 17 and PIPEDA Principle 4.3, users possess the right to request the deletion of their account and associated personal data.
KEYTOM SERVICES commits to honour such requests expeditiously and within one month from the receipt of the request.
Procedure for Deletion Requests:
a. Users may request account deletion via email support@keytom.com.
b. Upon receiving a deletion request, KEYTOM SERVICES will confirm the identity of the user to prevent unauthorised deletions.
c. Once identity is confirmed, KEYTOM SERVICES will proceed with the deletion of the user's account and all associated personal data, unless otherwise required by law to retain specific information.
Data Erasure:
a. Deletion of a user account will include all personal data such as user's name, address, email, and any other information collected.
b.KEYTOM SERVICES will also delete any derived data related to the user's account.
Backup and Archived Data: KEYTOM SERVICES will ensure that personal data is also erased from backups and archives in a timely manner, subject to system limitations and legal requirements.
Exceptions to Deletion:
a. KEYTOM SERVICES is a regulated organisation and is required by Canadian and EU law to legally retain certain personal data for a period of 5 years after the customer's account is closed. Such retention will comply with legal obligations.
b. The comprehensive list of information and data that the company is obligated to store, in accordance with legislation, is detailed in the Privacy Policy.
с. In instances where data is essential for the establishment, exercise, or defense of legal claims, data may be retained as necessary.
Record Keeping: KEYTOM SERVICES will maintain records of deletion requests and actions taken to ensure accountability and compliance with PIPEDA and GDPR.
Audit and Compliance: Regular audits will be conducted to verify compliance with this policy, PIPEDA, GDPR, and other relevant regulations.
Policy Review and Amendments: This policy shall be reviewed regularly and updated as necessary to ensure continued compliance with PIPEDA and GDPR and other pertinent laws.
Contact Information: For any inquiries or complaints regarding account deletion, users may contact via email support@keytom.com.
