Data deletion

1. When to use this procedure

This procedure is for an authorised administrator who wants to disconnect a WhatsApp Business account from Smalta, revoke access granted through Meta’s embedded signup, or request deletion of associated data that Smalta must erase.

2. How to submit the request

1. Write from an authorised corporate email address to privacidad@smalta.es with the subject “Eliminación de datos Meta/WhatsApp”.
2. State the organisation, asset or integration you want to disconnect and a means of confirming the request. You may include Meta business identifiers, but never passwords, one-time codes, tokens or patient data.
3. Complete the reasonable verification that you are acting as an authorised administrator. Smalta will not ask for Facebook or WhatsApp sign-in credentials.

3. What Smalta will do

After validating the requester’s authority, Smalta will revoke or stop using the granted access, delete connection credentials and secrets under its control, and erase identifiers, onboarding metadata and diagnostics that are no longer needed. A reference and the outcome of the request will be communicated.

Data that must be kept to meet a legal obligation, resolve a dispute or demonstrate security will be restricted for the applicable period and deleted or anonymised when that period ends.

4. Assets that remain on Meta

Disconnecting Smalta does not itself delete the WhatsApp Business account, business portfolio, phone number or other assets belonging to the organisation on Meta. The administrator can remove permissions or manage those assets using Meta’s tools. To also delete an account or information on Meta, Meta’s procedures must be followed.

5. Time limits and rights

The request will be processed without undue delay and within the applicable legal time limits. Where the request concerns personal data, you may also exercise the rights described in the privacy policy or lodge a complaint with the Spanish Data Protection Agency.