Legal
Data Deletion Instructions
How to request deletion of personal information associated with Halyon.
1. Purpose of this page
This page explains how a person can request deletion of personal information associated with Halyon.
It is intended to provide clear public instructions for data-subject requests, including requests connected to Halyon's website, authorised systems, communications channels or Meta/WhatsApp-related interactions where applicable.
2. How to request deletion
To request deletion of personal information associated with Halyon, send an email to:
Please include the subject line:
Data Deletion Request
In your request, include enough information for Halyon to understand and verify the request, such as:
- your full name;
- your email address or phone number used to communicate with Halyon;
- the organisation, account or workflow your request relates to, if applicable;
- the Halyon service, website or communication channel involved;
- a short description of the information you want deleted.
Please do not send unnecessary sensitive documents in the first email. Halyon will tell you if further verification is required.
3. Verification
Halyon may need to verify your identity and your relationship to the information before actioning a deletion request.
This is to protect personal information and prevent unauthorised deletion or disclosure.
4. What happens after you submit a request
After receiving a deletion request, Halyon will review the request and determine:
- whether Halyon holds or processes the relevant information;
- whether the request should be handled by Halyon or by another organisation that controls the information;
- whether the information can be deleted;
- whether the information must instead be retained, restricted, anonymised or preserved for legal reasons;
- what response or next step is appropriate.
5. When deletion may be limited
Deletion is not always possible.
Halyon may need to retain certain information where required or permitted by law, contract or legitimate operational need. This may include information needed for:
- employment or workforce administration;
- attendance, operational, approval or audit records;
- payment, tax, accounting or statutory records;
- legal, labour, regulatory or compliance obligations;
- fraud prevention, misuse investigation or security protection;
- dispute resolution or legal claims;
- system integrity, backup, logging or audit requirements;
- contractual obligations to an organisation using Halyon.
Where deletion is not possible, Halyon may restrict, archive, anonymise or minimise the information where appropriate and legally permitted.
6. Meta, WhatsApp and communications data
If your request relates to a WhatsApp or Meta-related interaction with Halyon, Halyon can review the information held in Halyon-controlled records.
Some information may also be processed by Meta or WhatsApp as part of the WhatsApp Business Platform. Requests relating to data held directly by Meta or WhatsApp may need to be handled through Meta's own privacy tools or processes.
Halyon does not control all data held by third-party communications providers.
7. Information connected to an organisation
Some personal information processed through Halyon may be controlled by the organisation that uses Halyon for its operational workflows.
Where that applies, Halyon may need to refer the request to that organisation or work with that organisation before taking action.
This is especially relevant where the information forms part of business, employment, attendance, operational, statutory or audit records.
8. Backups and logs
Some information may remain temporarily in backups, logs or archived records until those records are overwritten, expired or securely removed through normal retention processes.
Where information cannot immediately be removed from backups or logs, Halyon will take reasonable steps to ensure it is not used for ordinary operational purposes unless restoration, security, legal or audit requirements make access necessary.
9. Contact
To submit a deletion request or ask a question about deletion of personal information, contact:
Subject: Data Deletion Request
Effective date: 22 August 2026