Data-deletion instructions

You do not need a HYDP account to make a request. Email hello@hydp.co.uk with the subject “Data deletion request”, or use our website contact form and say that you want your data deleted. HYDP LTD (company number 13407890) handles these requests.

Include the email address you used with HYDP and, if relevant, the platform name and account, Page, channel or business identifier. Tell us whether you want a connected account removed, a CRM/contact record deleted, a report request deleted or all relevant personal information removed. Provide only what is needed to locate the records. Never send passwords, access tokens or API keys.

You can also remove HYDP’s access in the platform that authorised the connection. In Facebook or Instagram, look for Apps and websites or Business integrations; in TikTok or LinkedIn, look for connected apps or permitted services in account settings. Labels can vary between personal and business accounts. An administrator may need to remove a business-account connection.

For Google, Gmail or YouTube connections, use Google’s third-party connection settings. Removing HYDP there revokes the relevant permission. Google sign-in and any separately authorised data connection can have different access scopes.

Revocation and deletion are different: removing access stops future authorised API access but does not itself remove all existing HYDP records. Send a deletion request as well if you want us to remove stored information. It does not delete your Facebook, Instagram, TikTok, LinkedIn or Google account, or material you published on those platforms.

We locate the relevant records and may ask for limited evidence that you own the account or are authorised to make the request. We review the request, remove connection credentials and platform-derived records where applicable, and delete or irreversibly anonymise other information that is no longer needed. This is a request handled by the HYDP team, not an instant automated deletion service.

We normally respond within one month. If a lawful extension is needed for a complex request, we explain why and when to expect a response. Where a platform imposes a shorter deletion deadline, that deadline applies. For enabled YouTube API Services, requests to delete stored user data are fulfilled as soon as possible and within seven calendar days.

We confirm completion by email and explain any information that must be retained and why. You can reply to that email to ask for an update.

We may need to retain limited information to meet a legal obligation, resolve a dispute, establish or defend legal claims, or respect an opt-out. For example, a minimal suppression record can prevent further marketing. An exception is assessed for the specific record; it is not a reason to keep unrelated platform data.

Restricted backup copies are not used for ordinary business processing and expire through the relevant backup cycle. If a backup is restored, the deletion must be reapplied. Copies held independently by a social platform, an email recipient or someone who downloaded a public asset remain under their control.

If HYDP holds information solely on a client’s instructions, we may need to refer the request to that client and assist them in responding.

You can unsubscribe from marketing or ask us not to contact you without requesting deletion of every record. You can also withdraw optional website analytics through “Privacy preferences”; this stops further optional tracking in that browser and clears pending visit events in that tab.

Our Privacy Policy explains the information we use, retention criteria and your other rights. You can raise unresolved concerns with the UK Information Commissioner’s Office.