Data deletion

Send a request to hello@assayhouse.co.za from the email address associated with your account, marked "data deletion". No account, form or reason is required, and no charge applies.

State the email address the account uses and, where applicable, the business it relates to. Where we are unable to verify your identity from the request, we will ask for confirmation before acting on it.

A request by an individual covers personal information relating to that individual: name, contact details, enquiries submitted, portal login, comments and approvals recorded against work, and files uploaded.

Information belonging to a client business - brand guidelines, published content, website analytics and invoicing records - is held on behalf of that business and is not removed on the request of an individual associated with it. A request to remove a business account must be made by the business.

Where a Facebook Page or Instagram business account has been connected, deletion removes the stored authorisation for that connection and the page and account statistics obtained through it. We do not hold your Facebook or Instagram password and do not access personal profiles or private messages. The connection may also be revoked directly from your Meta business settings at any time, with immediate effect.

We acknowledge receipt of a request, identify the information held, delete it, and confirm completion in writing. Requests are completed within 30 days. Where more time is required, we will notify you of the reason within that period.

Deleted information may persist for a limited period in routine system backups before those are cycled. It is not restored to live systems and is not otherwise processed.

Invoices and accounting records are retained for seven years, as required by the Companies Act 71 of 2008, or longer where the Tax Administration Act 28 of 2011 requires it, and are used for no other purpose.

Deliverables produced for a client business remain the property of that business under its engagement terms and are not removed on the request of an individual.

Information outside these categories is deleted rather than deactivated.

Where we hold information about you that was supplied to us by a client, and that client is the responsible party for it under POPIA, we act as an operator. We will refer the request to the responsible party and identify to you the party to whom it was referred.

Termination of an engagement is not treated as a deletion request. Account information is retained in accordance with our privacy policy unless deletion is requested under this procedure.

A complaint about the handling of a request may be made to us at hello@assayhouse.co.za, and to the Information Regulator of South Africa at inforegulator.org.za.