Handling "Delete My Data" vs. "Delete My Account" Requests
Context:
When a customer requests to have their data deleted, it is important to differentiate between two types of requests:
- "Delete my data" - A legal request that may involve compliance with privacy laws such as GDPR, CCPA, or similar regulations. This involves deleting all personal data we have collected, including their ActiveCampaign contact.
- "Delete my account" - A request to remove or deactivate the user's account from our systems, which may or may not involve deleting all of their personal data.
"Delete My Data" Process:
Definition: This request is typically a legal privacy-related request in which the customer is asking for all personal data collected about them to be erased.
Action:
- Erase all personal data, including any data stored in ActiveCampaign.
- Ensure that any identifiable customer information in our database is fully deleted to comply with applicable privacy laws (e.g., GDPR, CCPA).
Confirm deletion with the customer, noting that their data, including any ActiveCampaign contacts, have been fully removed.
Notes:
- This is the first time this specific type of request has been noted. Make sure to handle these with care as they may have legal implications.
- Deleting the user's ActiveCampaign contact is mandatory when processing "Delete my data" requests.
"Delete My Account" Process:
- Definition: This request typically involves deactivating or removing a user's account from our platform. It may not necessarily mean all of their personal data is deleted unless specifically requested.
- Action:
- Deactivate or remove the user's account from our system.
- Keep relevant data intact unless the customer also requests for all personal data to be deleted.
- Confirm the account removal with the customer.
Important Consideration: If a customer uses language such as “delete my data,” always confirm with them if they are asking for all personal data (including any third-party integrations like ActiveCampaign) to be erased, or if they simply want their account removed.