Data Deletion

1. Request deletion from Swish

Use this form to request deletion of information associated with a Swish account, Meta/Facebook/Instagram connection, website enquiry or other Swish service. This does not delete your Facebook or Instagram account.

2. Remove Swish from Facebook or Meta

You can stop future access before or alongside a deletion request:

1. Open Facebook and select your profile picture.
2. Choose Settings & privacy, then Settings.
3. Open Apps and websites or Business Integrations.
4. Select Swish CRM and choose Remove.
5. Where offered, ask Facebook to notify Swish that the connection was removed.

A tenant administrator can also disconnect Meta inside Swish. Removal stops future API access. It does not automatically erase lead records, audit evidence or data already stored under the tenant’s lawful instructions, so submit the form above if deletion is also required.

3. What we will delete or anonymise

Subject to identity verification, controller instructions and lawful exceptions, this may include:

• Meta app-scoped user IDs, connection records and encrypted access tokens;
• cached Page, form, campaign and connected-asset metadata associated with the connection;
• website or sales enquiries controlled by Swish;
• account profile information where the account can lawfully be closed;
• support content and technical identifiers no longer required;
• tenant-controlled lead or patient data where the tenant authorises deletion or the law requires it.

Where a practice or other tenant controls the data, we may refer the request to that controller and assist them. Deleting an integration connection does not necessarily require deletion of a genuine patient enquiry that the practice must retain for clinical, safeguarding, complaint or legal reasons.

4. Process and timescales

1. We record the request and provide a confirmation code.
2. We verify identity, authority and the relevant account or connection.
3. We identify whether Swish or a tenant is the controller.
4. We delete, anonymise, restrict or refer the request as appropriate.
5. We confirm completion or explain any lawful limitation.

We aim to acknowledge requests promptly and respond within one month. Complex or multiple requests may take longer where data protection law permits, and we will explain any extension. Backup copies may remain until normal secure rotation completes, generally within 90 days, and are not restored for ordinary use.

5. Information we may lawfully retain

We may retain limited information where necessary for legal obligations, tax and accounting records, fraud and security prevention, safeguarding, regulatory duties, complaint handling, establishment or defence of legal claims, suppression of unwanted marketing, or proof that a request was completed. Retained information is restricted to the relevant purpose and retained only as long as necessary.

6. Contact

For help, email info@swish.click with “Data deletion” and your confirmation code in the subject line.