1. Introduction and Overview

FullTech Solutions (“we”, “us”, or “our”) is committed to respecting your right to have your personal data deleted. This Data Deletion Policy explains how you can request the erasure of your personal data, what information we can and cannot delete, and the steps we take to process your request.

This policy operates alongside our Privacy Policy and should be read in conjunction with it. It reflects your rights under the EU General Data Protection Regulation (GDPR) and the Gibraltar Data Protection Act 2018.

FullTech Solutions is a company registered in Gibraltar and acts as the data controller for the personal data you provide to us.

2. Your Right to Erasure (Right to be Forgotten)

Under Article 17 of the GDPR, you have the right to request the erasure of your personal data where one of the following applies:

  • The personal data is no longer necessary for the purpose for which it was collected.
  • You withdraw your consent and there is no other legal basis for the processing.
  • You object to the processing and there are no overriding legitimate grounds to continue.
  • The personal data has been processed unlawfully.
  • The personal data must be erased to comply with a legal obligation under EU or Gibraltar law.
  • The personal data has been collected in relation to the offer of information society services to a child.

Erasure means the permanent and irreversible deletion or anonymisation of your personal data so that it can no longer be used to identify you.

3. What Data Can Be Erased

You may request the deletion of personal data we hold about you, which may include:

  • Contact and enquiry data: your name, email address, phone number, and company name submitted via forms or consultations.
  • Project data: details shared about your business requirements, existing systems, and technical infrastructure.
  • Account data: your email address and account credentials for our SaaS products or client portals.
  • Marketing data: your contact details and preferences held for marketing purposes.
  • Technical and usage data: IP address, device information, and website usage data associated with your account or sessions.

Where you request deletion of your SaaS account, this will typically result in the removal of your account and associated data in line with this policy.

4. Data We May Need to Retain

In some circumstances, we are legally entitled or obliged to retain certain personal data even after you request erasure. We may need to retain data where:

  • Legal obligations: we are required to retain records to comply with EU or Gibraltar law, tax regulations, or accounting requirements.
  • Contractual obligations: data must be retained to perform or evidence a contract with you.
  • Legal claims: the data is needed to establish, exercise, or defend legal claims.
  • Public interest: processing is necessary for reasons of public interest, public health, or archiving purposes.
  • Fraud prevention: data is required to detect, prevent, or investigate fraud or security incidents.

Where we must retain data for these reasons, we will limit processing to what is strictly necessary and will delete it once the retention period expires or the need no longer applies.

5. How to Request Data Deletion

You can request the deletion of your personal data at any time. To help us process your request quickly and accurately, please provide the following information:

  • Your full name and email address as held in our records.
  • A clear statement that you wish to have your personal data deleted (specifying “data deletion request” or “right to erasure”).
  • Details of the data, account, or services your request relates to, where relevant.
  • Any additional information that helps us locate your data (such as a project reference or account ID).

Please submit your request using the contact details in Section 10.

You do not need to provide a reason for your deletion request, though doing so may help us process it more efficiently and identify any data we are legally required to retain.

6. Identity Verification

To protect your personal data and prevent unauthorised deletion requests, we will verify your identity before acting on your request. Depending on the data you have provided to us and the sensitivity of the request, verification may include:

  • Confirming details that match our records (such as email address or account information).
  • Requesting additional information to locate and verify your identity.
  • In rare cases involving sensitive data, requesting copies of identification documents.

We will only use the information you provide for verification purposes and will delete it once verification is complete, unless we are required to retain it.

If we cannot verify your identity, we may be unable to process your request. We will explain why if this occurs.

7. Our Process and Timeframes

Once we receive a verified data deletion request, we will:

  • Review your request and confirm receipt within 5 working days.
  • Locate and assess the personal data relevant to your request.
  • Erase the data that qualifies for deletion and identify any data we are legally required to retain.
  • Notify you of the outcome, including any data retained and the reasons for retention.

We aim to complete data deletion requests within one month of receiving your verified request. Where a request is complex or involves multiple data sets, this period may be extended by up to two further months. We will inform you of any extension and the reasons for it within the first month.

8. Notifying Third Parties

Where your personal data has been shared with third-party processors or recipients (such as hosting providers, analytics platforms, or payment processors), we will take reasonable steps to inform them of your erasure request and ask them to delete copies of your data, unless this proves impossible or involves disproportionate effort.

You can find more information about the categories of third parties we share data with in our Privacy Policy.

9. Cancelling or Modifying a Request

If you change your mind after submitting a deletion request, you may withdraw or modify it at any time before it is completed by contacting us using the details in Section 10. Please note that once data has been permanently erased, we may not be able to recover it.

Erasure is irreversible. If you later wish to use our services again, you will need to provide your personal data afresh.

10. Contacting Us

If you have any questions about this Data Deletion Policy or wish to submit a deletion request, please contact us:

If you are dissatisfied with how we handle your request, you have the right to complain to the Gibraltar Regulatory Authority (GRA), the data protection supervisory authority in Gibraltar, at https://www.gra.gi/data-protection.

Last updated: 14 September 2026