Data Retention

This page explains how personal data is erased from Conversion, and how to submit or action a deletion request.

​

Roles

For the personal data held in your workspace, you are the data controller and Conversion acts as a data processor on your behalf. You determine what personal data is collected, the purposes it is processed for, and when it is erased. Deletion requests reach Conversion in two ways:

• From you, the controller. You may instruct Conversion to erase personal data on your behalf, or carry out the erasure yourself using the tools described below.
• Directly from a data subject. Where an individual contacts Conversion directly to request erasure of their personal data, Conversion will refer the request to the relevant controller.

​

The right to erasure

Under Article 17 of the General Data Protection Regulation, a data subject has the right to obtain the erasure of personal data concerning them without undue delay, where one of the grounds set out in that Article applies. This right is commonly referred to as the right to be forgotten. Comparable rights to deletion exist under other data protection regimes. The process described on this page applies to any verified deletion request, regardless of the regulation it is made under.

​

Submitting a deletion request

Deletion requests are submitted from Settings > Data retention in your workspace. This is the primary way to ask Conversion to erase data on your behalf, whether that is a set of individual records or your organization’s data as a whole. Only administrators can submit a request. Members with any other role do not see the page. Records are identified by email address. Include the email address of each data subject whose personal data is to be erased in the body of your request, along with any other detail we need to scope it. Conversion confirms the scope of the request with you before any data is deleted.

​

What deletion removes

Deletion removes all identifiable information held for the record from Conversion’s systems. This includes:

• Personal data — name, email address, phone number, company and job information, and any custom field values held against the record.
• Engagement data — form submissions, email sends, opens and clicks, tracked website activity, campaign membership, and workflow history associated with the record.

Deletion is permanent. Conversion does not retain a recoverable copy of a deleted record, and the deletion cannot be reversed.

​

Deleting records yourself

You do not need to submit a request to Conversion to erase personal data. Deletion is available directly in your workspace through three routes: Each of these performs the same permanent deletion described above.

​

Connected systems

Erasing a record in Conversion does not, by itself, erase the corresponding record in a connected CRM. Personal data erased in Conversion but retained in Salesforce remains in Salesforce, and may be re-created in Conversion by a subsequent sync. Conversion provides settings in both directions so that deletions can be kept in step:

• Deletions made in Conversion can be propagated to Salesforce, removing the linked Salesforce lead or contact at the same time.
• Deletions made in Salesforce can be applied in Conversion, removing the linked Conversion contact when the Salesforce record is deleted.

Both are disabled by default and must be enabled under Settings > CRM. Review them before actioning an erasure request so that the deletion reaches every system holding the data. For the full set of deletion settings, including how account deletions cascade and why the settings are not applied retroactively, see Sync preferences.