Data Deletion

1. Submit a request

Email ntando@boxandatlas.com with the subject Data deletion request, or use our contact page. Include:

• your full name and a contact address we can use for the response;
• the email address, phone or WhatsApp number, account identifier, or platform profile used with the Services;
• the relevant service, property, enquiry, form, or communication channel;
• whether you want access, correction, account closure, deletion, or another restriction; and
• enough context to find the record without sending unnecessary sensitive information.

Do not send passwords, one-time codes, access tokens, private keys, or full payment-card details.

2. Identity and authority checks

We may ask for proportionate information to confirm that you are the person concerned or are authorised to act for them. We will not disclose or delete personal information where we cannot reasonably verify the request or where doing so would harm another person’s rights.

3. Requests connected to Meta

Our Meta connection is used by authorised administrators to manage business Page, Instagram Professional Account, publishing, and WhatsApp functions. It is not customer login. If your request relates to a Facebook, Instagram, WhatsApp, Page, or business-integration interaction, identify the platform and the profile, phone number, Page, or conversation involved.

You can also remove or disconnect the relevant app or business integration using the controls provided by Meta. That stops future access covered by the revoked permission, but it may not delete information already received and lawfully retained by us. Send the request above if you want us to review those records.

4. What we will review

Subject to verification and applicable law, we will locate and delete or anonymise personal information that is no longer required, which may include account profiles, enquiries, seller or buyer leads, shortlist and preference records, uploaded material, communications, consent records, and platform-scoped identifiers. We will also disconnect or remove operator credentials and managed-asset selections when the verified request is from the authorised business owner and the integration is no longer required.

5. Information we may retain

We may retain a limited record where reasonably necessary for legal, tax, accounting, transaction, mandate, professional, fraud-prevention, security, audit, dispute, or rights-protection purposes. We may also preserve information where another person’s rights or a legal hold prevents deletion. Protected backup copies may remain until normal rotation and will not be restored for ordinary use after a valid deletion request.

6. Timing and confirmation

We aim to acknowledge a complete request within seven business days and normally complete it within 30 days. A complex request, unresolved identity check, third-party dependency, or legal exception may require more time; if so, we will explain the next step where we are permitted to do so. We will confirm completion or explain any lawful limitation using the verified contact channel.

7. Contact

For more detail about our handling of personal information, read the Privacy Policy.