Data Deletion Instructions

Your Right to Request Deletion

Under the Malaysia Personal Data Protection Act 2010 (PDPA) and other applicable privacy laws, you have the right to request deletion of personal data held by Brandon Digital. This page explains who this applies to, what gets deleted, and how to submit a request.

Who This Applies To

Website visitors and direct contacts

If you submitted a contact form, subscribed to our newsletter, booked a consultation, or otherwise shared your information directly with Brandon Digital via brandondigital.co, we are the Data Controller and will process your deletion request directly.

End-users of our clients (WhatsApp-originated data)

If your phone number or message content was processed by Brandon Digital because you contacted one of our clients via WhatsApp (for example, after clicking a click-to-WhatsApp ad), our client is the Data Controller and we act as their Data Processor. We will forward your request to the relevant client for identification and fulfillment, and we will delete any operational copies we hold within our own systems in parallel.

What Gets Deleted

Upon a verified deletion request, the following data is purged across Brandon Digital's systems:

• • Contact form submissions and associated metadata
• • Newsletter subscription data
• • CRM records created from your interactions (subject to the Data Controller's retention policy if you are an end-user of a client)
• • WhatsApp webhook payloads, inbound message content, and parsed attribution identifiers (gclid, fbclid, ctwa_clid) tied to your phone number
• • Conversion events previously transmitted to the Meta Conversions API (note: Meta processes deletion on their side according to their Privacy Policy; we will submit a Data Processing User Request to Meta on your behalf if applicable)
• • Backups containing the above, which are rotated out on a rolling 30-day schedule

What Cannot Be Deleted

A small number of records may need to be retained to comply with Malaysian or other applicable law:

• • Financial and tax records (retained 7 years per Malaysian tax law)
• • Records required to enforce or defend a legal claim
• • Anonymised aggregate data that cannot be traced back to you

How to Submit a Deletion Request

By Email (Preferred)

Send an email to hello@brandondigital.co with the subject line "Data Deletion Request" and include:

• • Your full name (if you contacted us directly)
• • The email address, phone number, or WhatsApp number associated with the data
• • The approximate date range of your interactions (if known)
• • Which Brandon Digital client you interacted with (if you are an end-user of a client)
• • A statement confirming you are the data subject or are authorised to act on their behalf

If You Contacted Us Through a Brandon Digital Client's WhatsApp

You may also contact the business you originally messaged directly and request deletion from their records. That request will flow through to Brandon Digital's systems automatically as part of the client's offboarding or deletion workflow.

Our Response Timeline

• • Within 2 business days — acknowledgment of receipt and, if needed, a verification question to confirm identity
• • Within 21 days — deletion completed across live systems, in line with the PDPA timeline
• • Within 30 days — deletion propagated through rolling backups; final confirmation sent

If we are unable to fulfill your request (for example, if you are an end-user and the Controller has not authorised deletion), we will explain why and, where possible, point you to the responsible party.

Meta Platform Data Deletion Callback

If you previously logged into Brandon Digital services with Facebook or WhatsApp Embedded Signup and you revoke Brandon Digital's access to your Meta account, Meta will send us a deauthorization callback. Upon receipt, we automatically revoke any stored access tokens, mark the client record as offboarded, and begin the deletion process described above. No additional action is required from you if you take this route, but we recommend also emailing us to confirm which specific datasets you want purged.

Contact

For any questions about this page or a deletion in progress: