What happens after your request
We verify your identity proportionately and process your request. You receive a response without undue delay, normally within one month of receipt. Any extensions permitted by the GDPR are explained and communicated within the first month. If some data must be retained, we tell you which data, why and for how long.
When deletion starts, access to your account is disabled and the process can no longer be reversed. You receive an email confirmation when it is completed. Until processing starts, you can withdraw your request in the app or by contacting support.
Which data is deleted
The procedure deletes personal data associated with your account, except for the justified retention described below. In particular:
- your name, email address and other profile details are deleted or anonymized;
- passwords and authentication methods are removed or made unusable; sessions, permissions and access are revoked;
- personal notifications, notification preferences and device push tokens are deleted;
- personal files that do not belong to an organization are deleted, unless an applicable retention requirement exists;
- any consultant directory profile is removed from public view and anonymized.
Uninstalling the app alone does not delete your account.
Which data may be retained and for how long
HACCP records and business documents. Records, photos and attachments belonging to a food business or consultancy remain with that organization under its instructions and applicable retention periods. Deleting an employee’s account does not delete the business archive. Personal attribution in HACCP evidence may be anonymized later: the policy currently applied provides for 730 days from the service’s receipt of the relevant evidence, with suspension while recalls remain open. This is not a universal legal retention period; the need for retention and any limits on erasure must be explained in the response to your request.
Invoices and contractual records. ELERIA’s invoices and accounting records are retained for 10 years from the applicable accounting reference date. Contracts, orders and proof of accepted terms are retained for 10 years after the relationship ends, limited to what is necessary for obligations and the protection of rights.
Evidence of choices and support. Evidence of optional consent and its withdrawal is retained for 5 years after withdrawal or the end of the processing. Support tickets are retained for 24 months after closure; unnecessary attachments are deleted earlier. A minimal suppression record may remain to prevent unwanted contact.
Security and diagnostics. Security and administrative activity logs are retained for 365 days from the event; ordinary technical logs and app diagnostic events for 30 days from the event. Any evidence needed for an incident or dispute is kept separately, only for as long as that purpose justifies.
Backups. After removal from active systems, residual copies in ELERIA’s backups expire within their maximum 35-day cycle, unless specific documented retention applies. Restoring a backup must respect erasure requests already fulfilled.
Any further retention for specific obligations, disputes or evidence of request handling is limited to the data needed. The response specifies the reason and applicable duration, or the criteria used to determine it. The privacy notice provides the full list of categories and retention periods.
If you are an organization’s sole owner
You can still submit your request. To complete it, ownership must first be assigned to another authorized person or the organization must be closed. Support can help you by email, without requiring access to the app.
Deleting a personal account does not automatically close the organization or its subscription. If you also want to end the business service, say so in your request. We verify your authority and explain the termination date and the effects on the subscription.
Organization closure includes 90 days of read-only access and data recovery, followed by deletion from active systems within the next 30 days, subject to specific retention requirements. You can request earlier deletion after its effects have been explained. These 90 days are not a mandatory waiting period for personal account deletion requests. If closure also results in deletion of your account, you receive confirmation; the account remains active if it is needed for other organizations.