Skip to main content

How does Enthuse handle UK GDPR 'Right to Be Forgotten' requests, including legal exceptions?

Written by Emma Smith

How does Enthuse handle UK GDPR 'Right to Be Forgotten' requests, including legal exceptions?

Under the UK General Data Protection Regulation (GDPR), individuals have the 'Right to Be Forgotten' (RTBF), allowing them to request the deletion of their personal data from a platform. Here's how Enthuse handles such requests:

Processing of 'Right to Be Forgotten' Requests

When a user submits a GDPR 'Right to Be Forgotten' request, Enthuse initiates a process to remove the individual's personal data from its systems. This process ensures that the user's right to data privacy is respected and adhered to under GDPR guidelines.

Legal Exception for Gift Aid Data

In cases where a user has made donations through Enthuse and claimed Gift Aid, the platform is legally required to retain certain related data. This legal obligation is based on HMRC (HM Revenue & Customs) regulations, which mandate that Gift Aid-related records must be retained for six years from the date of the donation. After this mandatory retention period, the data is automatically and permanently removed from Enthuse's systems.

Automatic Data Removal

For all Gift Aid-related data, once the six-year HMRC retention period has elapsed, Enthuse will automatically delete the data without any additional action required by the user. This ensures compliance with both legal requirements and customer expectations for data privacy.

Summary

Enthuse is committed to data privacy and complies fully with UK GDPR requirements. While personal data is deleted upon request, certain legal exceptions, such as the retention of Gift Aid-related records for six years, apply. After fulfilling legal obligations, all retained data is automatically erased following the retention period. For more details on data privacy and GDPR compliance, please contact Enthuse's support team.

Did this answer your question?