Data Deletion Instructions

Choose whichever channel is easiest. No account or login is required.

• Email hello@dickyibrohim.com, for example with the subject "Data Deletion Request". Include the phone number and/or email address you used, and — if the request concerns a store — the store name or order number.
• From WhatsApp: reply DELETE MY DATA to the business number that messaged you. The request is routed to me with your number attached.
• If you connected your account through Facebook: open Settings & privacy → Settings → Apps and websites, select the app you connected, and choose Remove. To request deletion of data I hold, also contact me through one of the channels above.

To prevent disclosure or deletion of another person’s data, I normally verify control of the email address or WhatsApp number used originally. If more evidence is necessary, I explain why and request the minimum proportionate information. I do not request passwords or OTPs. A fixed email subject or a full identity-document copy is not a default requirement; verification is not used to delay statutory handling.

• Contact data: your name, phone number, email address, and correspondence with me.
• Messaging data: WhatsApp message logs, template delivery records, and OTP records linked to your number.
• Login data: profile name, picture, and email obtained through Facebook Login, plus the app-scoped user ID linking your account.
• Store account data (where I operate the store): profile, addresses, saved preferences, and consent records.

• Necessary tax, invoice, and accounting records for their statutory retention period; only the relevant records are retained with restricted use.
• Specific evidence needed for an actual legal claim, with a documented lawful basis, limited access, and review when the need ends. This does not justify keeping all correspondence, client databases, or credentials.
• A minimal suppression record where necessary and lawful to honour an opt-out. A hashed or pseudonymised contact can still be personal data; it is not described as anonymous merely because a name is removed.
• Copies controlled independently by a client, merchant, or provider are coordinated with the relevant controller. I handle data under my own control and explain any lawful limits; forwarding a request alone does not discharge my obligations.

Receipt and verification

The receipt time and the relevant request are recorded. Necessary verification is proportionate; business hours or the time I read a message do not by themselves reset a legal deadline.

Applicable deadline

Handling follows the statutory deadline for each right. UU PDP requires action within 3 × 24 hours for certain related rights, including access, correction, cessation following withdrawal, and restriction, subject to applicable legal conditions. Deletion follows its applicable legal requirements; a blanket 7-day acknowledgement or 30-day completion rule does not postpone a shorter duty.

Copies and backups

I address accessible copies and relevant processors. Any lawful retention exception, applicable backup cycle, and expected removal are explained for the actual service; no universal extra 30-day backup delay is imposed. Restricted backups are not repurposed, and deleted data is not returned to ordinary use on a restore.

Written outcome

You receive the outcome, any data lawfully retained and the reason, and relevant next steps through the official channel. Partial handling does not disguise an outstanding requirement.

Details of what data is collected, why, and how long it is normally kept are in the Privacy Policy at https://www.dickyibrohim.com/privacy/. Questions about a request in progress: hello@dickyibrohim.com.