1. Purpose
This document sets out our policy for responding to requests for deletion of data under data protection
law.
This document explains the rights of the data subject in relation to data deletion and the
responsibilities of 1Care in responding with such a request.
2. Individual Rights
An individual has the right to erasure, also known as ‘the right to be forgotten’. The principle underpinning this right is to enable an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
3. When does the right to erasure apply?
As stipulated in data protection law, individuals have a right to have personal data erased and to
prevent processing in specific circumstances:
• Where the personal data is no longer necessary in relation to the purpose for which it was originally
collected/processed;
• When the individual withdraws consent;
• When the individual objects to the processing and there is no other legal ground for the relevant
processing activity;
• When the personal data was unlawfully processed;
• Where the personal data has to be erased in order to comply with a legal obligation.
4. What information does 1Care retain?
The 1Care online system stores data about individuals in order to create a Team Report. We store the
name, e-mail address, gender, organisation/department (if provided) and subsequent Role scores for each
individual in order to create a report, which is stored on our secure servers in our database for a
period of 90 days. This data is stored and used in accordance with our Privacy Policy, which can be
found at:
https://1careapp.com/privacy-policy.
If consent is provided, personal data (including the above, plus address, telephone number and notes)
may be stored in our CRM system for the purposes of contacting you regarding 1Care news, products and
promotions.
5. How can data be deleted?
If you have purchased a service directly from 1Care, 1Care acts as data controller. In this case, we will
delete the data upon request upon closure of your account, or after three years.
A user of the 1Care Online Account, acting on behalf of their organization, can delete data from their
system whenever they wish. This data is deleted from the system immediately and cannot be recovered by
any users or 1Care employees after this point. Data which has been deleted or otherwise destroyed can
not be recovered at any time. Sufficient warning is given to the account administrator before data are
permanently deleted.
Data may still remain in the systems back-up files, which will be deleted periodically.
Information may be deleted from our CRM upon request. We undertake to perform the deletion within one
month (30 calendar days) and will send you a confirmation once the information has been deleted.
Wherever possible, we will aim to complete the request in advance of the deadline.