The reason that we ask for ID is to safeguard your personal data by verifying that the request is genuine before proceeding with deleting your personal data. This process is consistent with guidance published by the Information Commissioner’s Office. (https://ico.org.uk/your-data-matters/your-right-to-get-your-data-deleted/)
The purpose of this process is to prevent someone unauthorised from requesting deletion of your data, for example where there are shared email addresses, or someone has access to your account or email address, or where someone is spoofing your email address. Please see our Privacy Policy (xxxxxx) for more information about personal data we collect store and process.
Please be assured that when you send ID to our dedicated ID email address, this is automatically and permanently deleted from our systems within 7 days. We do not continue to store or process your ID beyond this time or use it for any other purpose other than to verify your identity to action your erasure request.
If you would prefer not to send ID via email, you can post copies to our address and upon receipt from our team we will then securely dispose of the copies. Please send these to:
Data Protection Team,
xxxx
xxx
xx
I hope the above explains our rationale and allays any concerns you may have. If you have any further questions please do not hesitate to ask.
first ask for a listing of all the information they have about you, before asking for deleting your data. this listing must contain the request itself. if your request is missing, they are likely breaking compliance rules.
I'm not quite understanding, do you mind breaking that down for me?
I hit them with the fact that a person controlling the e-mail address can use their ‘Forgot password’ feature to take control over the account and access my sensitive data they’re in possession of or steal my identity using their own services.
this was their excuse to why they won't delete my info without proof of ID.
I told them no, I told them that if my bank or phone provider or online grocer who all have much more important and sensitive info, namely my payment/bank details, can verify me without extra documentation, so can they, they still said no.
So I've filled a complaint with the ICO, there's fuck all else I can do unfortunately..
Took me a minute to find, but that's really great info, thanks!
I've already filled a complaint with the ICO since the company continued to refuse to delete my data, so we'll see what they come back with (their own guidelines say something very similar - "they should only ask you for just enough information to be sure you are the right person") if they side with the company I will definitely be quoting these guidelines.
Apologies if this isn't the right community to ask in, I figured folks who use them would know, but if there is a better place to ask, please let me know!...
Was forced to use a third party to fill a rental application. The application failed and now they're demanding significantly more sensitive information than what I ever provided before they'll comply. In UK. This can't be legal? (kbin.social)
Their reply to my request to delete my data:...
Large external HDD noise levels (kbin.social)
Apologies if this isn't the right community to ask in, I figured folks who use them would know, but if there is a better place to ask, please let me know!...