Question 1

How do I handle a right to be forgotten request?

Accepted Answer

Open the customer in Customers, menu, Delete GDPR erasure. Confirm the irreversible action. Advanced Booking anonymises personal data and deletes everything without a legal retention requirement.

Question 2

What gets deleted exactly?

Accepted Answer

Hard delete: notes, photos, magic links, booking edit tokens, tag and segment links, active flow enrollments, draft quotes. Anonymise: customer name, email, phone, address, birthdate. Booking descriptions and internal notes nulled. Activity payloads redacted.

Question 3

What stays for legal reasons?

Accepted Answer

Dutch bewaarplicht (AWR art. 52) requires 7 years of bookkeeping. Invoices, sent or later quotes, and booking shells stay. Customer name on them is the anonymised placeholder.

Question 4

Why are invoices not deleted on GDPR request?

Accepted Answer

GDPR art. 17 carves out an exception for legal obligations. Dutch tax law requires invoices for 7 years. EDPB accepts irreversible anonymisation as equivalent to erasure for art. 17.

Question 5

What about voice recordings and voiceprints?

Accepted Answer

The per tenant link between customer and voiceprint is removed. The voiceprint itself (caller name, email, known phone numbers) stays because voice ID serves cross tenant use cases. Contact support for a manual voiceprint erasure.

Question 6

Is erasure reversible?

Accepted Answer

No. Once confirmed, the personal data is gone and cannot be recovered. The financial trail remains with the anonymised customer name.

Question 7

How do I export a customer's data before erasing?

Accepted Answer

Use the Export customer data button on the customer detail. JSON file with profile, bookings, invoices, quotes, email history, notes. Send to the customer first.

Question 8

What is in the GDPR audit log?

Accepted Answer

Under Settings, Privacy, Audit log. Records who requested the erasure, when, the reason, and how many rows per table were affected. Evidence for the 30 day GDPR window.

Question 9

Can I erase someone myself or only on request?

Accepted Answer

You can erase at your discretion. Common reasons: customer request, retention policy, duplicate cleanup. Log the reason in the erasure dialog.

Question 10

What is the difference between Cancel and Delete on a customer?

Accepted Answer

No Cancel exists; the only destructive action is GDPR erasure. To soft block without erasing: use a Blocked tag, set do_not_email, reject new bookings. No hard "block from booking" toggle today.

Privacy and GDPR