Privacy requests

Under India’s DPDP Act and the UAE PDPL, people can ask what data you hold about them, ask for a copy, ask you to correct or delete it, or withdraw consent. HashBook helps you answer on time and keep proof.

Handle a request

1. Settings → Privacy requests → New request — pick what they want, the day it arrived, their name and email, and find them in HashBook. The due date is set for you (30 days unless you change it at the bottom of that page).
2. Check it’s really them — for example, reply only to the email address already on their record.
3. Click their name to see what’s held:
   • Download their data gives a file you can email them.
   • Erase… (type ERASE) removes their name, email, phone, notes and comments for good.
4. Update the request to Completed (or Rejected) and write what you did. That’s your proof if anyone asks later.

When data can’t be erased

Invoices and payroll records can’t be erased while the law says to keep them. HashBook tells you why, so you can say so in your reply.

Your own data

Anyone can download their own data from My account → Download my data.

Privacy contact

Fill in the privacy contact on the Privacy requests page, and put the same email in your own website’s privacy notice.