Customer data deletion requests

Hello there. Yes, customers can absolutely ask you to delete their personal data, but you do not always have to do it.

The legal position:

Under UK data protection laws, specifically the UK GDPR, individuals have a right to erasure. This is sometimes called the right to be forgotten. It means a customer can request that you securely destroy the personal information you hold about them.

However, this is not an absolute right. It only applies in certain circumstances, and there are several very common reasons why a business can lawfully refuse to delete everything.

When you usually have to delete the data:

1. When you no longer need the data for the reason you originally collected it.
2. If you were relying purely on their consent to use the data and they have now withdrawn it, such as deciding to unsubscribe from a marketing email.
3. If they object to you holding the data and you have no overriding legitimate business reason to keep it.
4. If you have processed the data unlawfully in the first place.

When you can safely refuse:

You can refuse to delete some or all of a customer's data if you have a valid legal or overriding business reason to keep it. The most common examples for businesses include:

1. Complying with a legal obligation. For example, you are legally required to keep tax and accounting records for HMRC for around six years. A customer cannot force you to delete their past invoices before that time is up.
2. Establishing or defending legal claims. If there is an ongoing dispute, an active warranty, or a risk of a court claim, you can keep the data necessary to protect your business.
3. Fulfilling a contract. If you are still in the middle of providing a service or delivering a product to them, you clearly still need their details to finish the job.

Practical next steps:

If a customer gets in touch asking you to wipe their data, here is a sensible way to handle it:

1. Acknowledge the request politely and quickly.
2. Verify their identity to ensure you are dealing with the actual customer, especially if the request comes from an unfamiliar email address.
3. Check the information you hold about them. Sort out what you can safely delete and what you legally need to keep.
4. Securely delete or fully anonymise the data you no longer need, such as taking them off marketing lists or deleting casual correspondence.
5. Reply to the customer within one calendar month. Confirm what has been deleted. If you are holding on to certain records, explain politely what you are keeping and the legal reason why, such as your obligation to maintain financial records for tax purposes.