Data deletion

How to request deletion

To ask ICRA to delete personal information it holds about you, email the privacy contact below. This is the public contact for deletion, access, and correction requests.

What to include

Please include enough information for ICRA to verify that you are the requester and to identify the relevant case or account. Helpful details can include the channel you used (for example Instagram), a username if you used one, a case or tracking reference if you have one, and an approximate date. Do not email passwords, access tokens, or unnecessary sensitive documents.

How ICRA handles a request

ICRA will verify identity, assess the request, delete or de-identify eligible information, and confirm when that work is complete. Timing depends on the information needed to verify the request and locate the relevant records.

During the current pilot, deletion requests are handled manually by ICRA staff. ICRA will acknowledge your request within 2 to 5 business days and tell you what was deleted, what was de-identified, and what was retained and why. Information already written to a backup is removed as those backups expire on their normal 30 to 90 day cycle rather than being erased from existing backup copies.

Information that may be retained

Limited information may be retained when reasonably necessary for security, fraud prevention, audit integrity, dispute handling, or applicable obligations. The Privacy Policy explains the kinds of information ICRA may hold and why.