Request deletion of your data

What information you may ask us to delete

Depending on how you have used PassCLLT, a deletion request may relate to personal information such as:

• contact information, including an email address or name where held;
• optional marketing contact information and consent records;
• transactional test-result email request records;
• support or communication records that are no longer reasonably required;
• access, device or Restore Access information that is no longer reasonably required to provide the service; and
• other identifiable personal information held by PassCLLT that is not subject to a lawful or legitimate retention requirement.

PassCLLT's privacy-minimised analytics are designed not to contain names, email addresses, payment references, Restore Access references, persistent visitor identifiers or session identifiers.

Information that may need to be retained

Some records may need to be kept for a limited period where they remain reasonably necessary for:

• providing or restoring a purchased entitlement;
• payment verification, accounting or tax obligations;
• security, fraud prevention and misuse investigations;
• resolving a complaint, dispute or charge query; or
• complying with applicable law or a lawful request from a competent authority.

If information must be retained, PassCLLT will keep only what is reasonably necessary for the relevant purpose and will not use retained records for unrelated marketing.

If you request deletion of records that are still needed to maintain Full Access or Restore Access, we may explain how deletion could affect those services before completing the request.

Current retention position

• transactional test-result email request records are normally deleted after approximately 90 days;
• raw privacy-minimised analytics records are currently retained for approximately 180 days;
• marketing contact information may be retained while consent remains active and may be removed or suppressed when consent is withdrawn; and
• purchase, payment-verification, access, device and Restore Access records may be retained only for as long as reasonably required for the purposes described above.

What happens after you send a request

1. We will review the information you provide and identify the relevant PassCLLT records.
2. We may ask for limited additional information where reasonably necessary to verify the request or locate the correct records.
3. We will delete information that is no longer reasonably required and is not subject to a lawful or legitimate retention requirement.
4. If any information must be retained, we will explain the reason where appropriate.

Requests will be handled as soon as reasonably practicable, taking into account applicable legal and operational requirements.