Deleting your data

Ask the business you dealt with

Flare CRM is used by a business to keep track of the people it deals with. That business decides what is kept about you, so a deletion request goes to them first: the company whose staff called you, or whose WhatsApp number you wrote to. They can delete your record themselves, immediately, from within the software.

If you do not know who holds your details, or they do not respond, write to us at hello@flarehub.co.ke with the phone number or email address you were contacted on. We will identify the installation, pass the request to them, and follow it up.

Deleting a WhatsApp conversation

To have the WhatsApp messages between you and a business removed from its system, send the request from, or quoting, the WhatsApp number you messaged from, either to the business or to us at the address above. The conversation, its attachments and the phone number it is filed under are deleted together. Deleting them here does not delete the copy in your own WhatsApp app, which only you can remove.

What happens then

• The record is hidden immediately, so no member of staff can see it or act on it.
• It is destroyed permanently when the purge period the business has set passes, which is what makes an accidental deletion recoverable in the meantime.
• Call recordings and message attachments are deleted with it from file storage.
• Nightly backups are kept for fourteen days, so a copy exists in a backup until the last backup taken before the deletion rolls off.

What is kept, and why

Two things survive a deletion. The audit log keeps a line saying that a record was deleted and by whom, without the record itself, because a log that can be rewritten is not a log. Where the business has a legal obligation to keep something, for example an invoice or a record required by a regulator, it keeps that and nothing more. If you ask, the business must tell you which of the two applies to you.

If you are a member of staff

Your account belongs to your employer. Ask an administrator to deactivate it: they can do that from the settings screen, which signs you out everywhere and stops the account being used, while leaving the work you did attributed to you in the record. Removing your name from that history is a decision for your employer, since it is their business record.

How long we take

We acknowledge a request within three working days and complete it within thirty days, which is the period the Data Protection Act 2019 allows. If a request is going to take longer than that, we tell you why before the thirty days are up.

If you are not satisfied

You may complain to the Office of the Data Protection Commissioner in Kenya, or to the supervisory authority where you live.