User Data Deletion Instructions

1. About these instructions

This page explains how individuals and authorised business users can ask for personal information to be deleted from the Aftal Group website, the Aftal Group sales workspace and the WhatsApp, Instagram and Messenger connections that the workspace uses.

These instructions apply to services operated by Aftal Group FZC (“Aftal Group”, “we”, “us”, “our”).

2. How to submit a deletion request

Send an email to info@aftalgroup.com with this subject:

In your email, give the following where it applies:

• your full name;
• your email address;
• your telephone or WhatsApp number, with the international country code;
• your WhatsApp display name, Instagram username or Messenger account name;
• the name of the business you were in contact with, if you know it;
• the name of the company you represent, if the request concerns a business account;
• a clear statement of the information you want deleted.

For example:

Do not send passwords, one-time passwords, API tokens, application secrets, payment-card details or identity documents that are not needed.

3. If you chatted with one of our clients

Businesses use our workspace to answer their own customers. If you messaged a business that uses it, that business is responsible for your information and we hold it on the business’s behalf.

You can ask the business directly, or send your request to us. We pass every request we receive to the business concerned, help it respond, and delete the information from the workspace when the business confirms.

4. Identity and authority verification

Before we delete information we may need to check that the request comes from the right person or from an authorised representative. We may:

• ask you to reply from the email address linked to the record;
• ask you to confirm that you control the telephone number linked to the conversation;
• ask for limited information about a recent interaction;
• ask you to confirm your authority to act for a business account or for another person.

We ask only for what is reasonably needed. If we cannot verify your identity or authority, we may be unable to complete the request.

5. Information we delete

Subject to verification and to the law, deletion may cover:

• contact details stored in the workspace;
• WhatsApp, Instagram, Messenger and website enquiry records;
• message content and attachments stored in systems we control;
• social-media profile identifiers linked to the record;
• lead records, notes and conversation summaries;
• automation and integration metadata linked to the person;
• other personal information that is no longer needed for a legitimate business or legal purpose.

Where complete deletion is not technically possible, the information is irreversibly anonymised so that it can no longer reasonably identify the person.

6. Information we may need to keep

Some information may be kept where it is needed for:

• contracts, invoices and payment records;
• accounting, tax and regulatory obligations;
• establishing, exercising or defending legal claims;
• fraud prevention, security investigations and abuse prevention;
• resolving complaints or disputes;
• complying with a court order or a request from a competent authority.

Where the law requires us to keep information, we keep only what is necessary and delete or anonymise it when the retention period ends. Copies in backups remain until the backup is overwritten or retired under our normal backup schedule.

7. Processing time

We acknowledge and process verified deletion requests as soon as reasonably possible, and aim to complete eligible requests within 30 calendar days of verification.

More time may be needed if the request is complex, if several systems or business records must be reviewed, if we need more information to verify identity or authority, or if the law requires us to keep the information. If so, we will contact you using the details in your request.

8. Disconnecting a Meta or WhatsApp business asset

A business client can remove Aftal Group’s access to a Meta Business portfolio, a WhatsApp Business Account, a telephone number, an Instagram account or a Facebook Page at any time, in its Meta Business settings or in the WhatsApp Business app. Removing access stops future access and processing.

Disconnecting an asset does not by itself delete information that was already stored in the workspace. To have that information deleted, also send a deletion request by the email procedure above.

Meta and WhatsApp keep information under their own terms, policies and legal obligations. Requests about data that Meta or WhatsApp control must be made to Meta, through the account’s settings or Meta’s support channels.

9. Requests from business clients

An authorised administrator of a business client may ask us to delete data belonging to that business or to its authorised users, during the service or when it ends.

We may ask for evidence that the person making the request has authority to act for the business and for the Meta, WhatsApp or workspace assets concerned. A business administrator cannot ask for another person’s personal information to be deleted without appropriate authority or a valid legal basis.

10. Confirmation of deletion

After we complete a verified request, we send confirmation to the email address used to make it. The confirmation says what was deleted or anonymised, whether anything had to be kept and why, and whether you need to do anything else.

11. Privacy Policy

More information about how Aftal Group collects, uses, shares and protects personal information is in our Privacy Policy. Our Terms of Service are also available.

12. Contact us

For deletion requests or questions about these instructions, contact: