Data deletion

Co Sweyt sits between two groups, and the route depends on which one you're in.

Salon owners (Co Sweyt customers)

If you've signed up for Co Sweyt to run your salon, you can request deletion of your account and associated data by emailing founders@cosweyt.com from the email address on your account, or by writing from the dashboard.

End-customers (salon customers)

If you're a person who booked or messaged a salon that uses Co Sweyt, the salon is the Data Controller for your data. Contact the salon directlyand ask them to delete your record. They have the tools to do this from their Co Sweyt dashboard. If you've tried and the salon hasn't responded within a reasonable time, email us at founders@cosweyt.com and we'll help the salon fulfil your request.

Marketing-site visitors

If you submitted your phone number on the homepage form and want it deleted, reply STOP to any text we send you, or email founders@cosweyt.com from the number you submitted.

Send an email to founders@cosweyt.com with the subject line "Data deletion request". Include:

• Your name, and the email or phone number associated with the data you want deleted.
• If you're an end-customer, the name of the salon you booked with (so we can route the request correctly).
• Whether you want everything deleted, or only a specific record (e.g. one call recording, a single message thread).

We may need to verify your identity before acting, to stop someone deleting your data without your consent. We'll keep the verification proportionate, no paperwork beyond what's needed.

When we act on a deletion request, we remove your personal data from Co Sweyt's active systems within 30 days. Removal propagates to encrypted backups within a further 30 days as backup snapshots roll forward.

Some data we're legally required to keep, even after a deletion request:

• Billing records. Invoices and payment evidence must be retained for 6 years after the end of the relevant tax year (HMRC).
• Fraud / abuse signals.Where we've had to block an account for fraud or platform abuse, we retain minimal data to prevent repeat sign-ups.
• Aggregated, anonymous analytics.Page-view counts and similar aggregates that can't be tied back to you remain in our analytics dataset.

We'll always tell you what we kept and why if you ask.

• Acknowledgement within 1 working day.
• Identity verification within a few days where needed.
• Deletion from active systems within 30 days of verified request, per UK GDPR.
• Backup propagation within a further 30 days.
• Confirmation email sent once deletion completes.

If a request is complex or we need an extension under Article 12(3) of UK GDPR, we'll tell you within the first month and explain why.

This page is the data-deletion URL that Co Sweyt has registered with Meta for our Instagram and Facebook integrations.

If you previously connected an Instagram or Facebook account to a Co Sweyt-powered salon and want the associated data removed, email founders@cosweyt.com with the subject line "Meta data deletion request"and include the Instagram or Facebook handle and the salon name. We'll remove the associated Meta-sourced records (DMs, user identifiers, conversation history derived from Meta channels) within 30 days, per the policy above.

If we haven't actioned your request to your satisfaction, or you believe we've mishandled it, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We'd much rather hear from you first so we can fix it.