Data Deletion Request

How to request deletion

You can ask Vantara Solutions (Pvt) Ltd to delete the personal data we hold about you. There is no form to fill in and no charge.

Send your request to hello@vantara.lk with the subject line "Data deletion request". If email is difficult, you can message us on WhatsApp at +94 71 733 1431 and we will confirm the request in writing.

This page explains what happens next. It sits alongside our Privacy Policy, which describes what we collect and why.

What to include

So that we can find your data and be sure the request is genuinely yours, please tell us:

• Your full name
• The phone or messaging number you used — this is usually how records are identified in our systems
• An email address we can reply to
• The name of the business you dealt with, if you were transacting with a shop, restaurant, hotel or other business rather than with Vantara directly
• What you want deleted — everything, or a specific record such as a booking, order or enquiry
• Confirmation that you are the person the data is about, or that you are authorised to act on their behalf

We may ask one follow-up question to verify your identity before we act. We will not ask you for a password, a card number, or a copy of a document we do not need.

Whose data it is

Vantara handles personal data in two different capacities, and which one applies changes what we are able to do with your request.

Data we hold for ourselves. Enquiries and demonstration requests you send us, job applications, and records of our own business customers. Here Vantara is the controller — we decide what the data is used for, and we can act on your deletion request directly.

Data we hold on behalf of a business. If you placed an order, made a booking, or exchanged messages with a shop, restaurant, hotel or other business through a Vantara-powered system, that business is the controller of your data. Vantara operates the system on their behalf and processes your data on their instructions. We will not delete a business's records without their instruction, and we will keep you informed while we obtain it.

If you dealt with a business that uses Vantara

Suppose you booked a service with a business — say Kumar Motors — and that booking was taken through a Vantara system. The booking history belongs to Kumar Motors, not to Vantara. They decide what it is used for and how long it is kept; we store and process it for them.

You can send your deletion request to either of us:

• Directly to the business. This is usually fastest. They can act on your request themselves and instruct us where needed.
• To Vantara. We will pass your request to the business within 5 business days, tell you that we have done so, and carry it out once they instruct us. If they decline, or if the decision is theirs to make rather than ours, we will tell you that plainly and give you their contact details so you can take it up with them.

We will not quietly sit on a request. Whichever route you use, you will hear from us.

If you are a Vantara business customer

If your business subscribes to or trials a Vantara product, deletion of your account and the data held in it is handled under your agreement with us.

When a business customer ends its relationship with us, we delete or anonymise their data within 90 days, except where we are required to retain records by law or where retention is necessary to resolve a dispute. Individual staff members can ask us to remove their own contact and login details at any time using the process on this page.

Before deletion we can provide an export of your business data on request. Once deletion is complete it cannot be reversed, so please take the export first if you want one.

Data received through Meta platforms

Some Vantara products let a business communicate with its customers over WhatsApp, Facebook or Instagram. Where we receive your data through one of those channels — your name, your messaging number, and the content of messages you exchange with the business — that data is covered by this page and by our Privacy Policy, and you can ask for it to be deleted in exactly the same way.

As above, messages you exchanged with a business belong to that business, and we act on their instructions. Removing a Vantara application from your Facebook or Instagram account, or blocking a business on WhatsApp, stops further data reaching us but does not by itself delete what has already been received — send us a request using this page for that.

Deleting data we hold does not delete anything held by Meta on its own platforms. To remove your data from Facebook, Instagram or WhatsApp themselves, use the controls in those apps.

How long we take

If a request is complex and we need longer, we will tell you before the 30 days are up, explain why, and give you a date.

What we may have to keep

A deletion request removes as much as we lawfully can, but some records have to stay:

• Accounting and tax records — transaction and invoice records are kept for up to 7 years to meet Sri Lankan record-keeping requirements
• Records needed for a legal claim — where retention is necessary to establish, exercise or defend a legal claim, or where we are subject to a lawful order
• Opt-out records — if you asked not to be contacted, we keep the minimum needed to honour that, otherwise we would have no way to know
• Anonymised and aggregated data — counts and totals that can no longer be linked to you are not personal data and are not deleted

Where we keep something, we will tell you what it is and why.