Delete Your AttendIQ Data

1. How to request deletion

You do not need to be signed in to make a request, and there is no charge.

Email us. Send a message to:
privacy@attendiq.co.uk
Use the subject line "Data deletion request". This routes it straight to the team that handles it.
Tell us who you are. Include your full name, the email address or phone number you use to sign in to the AttendIQ app, and the name of the employer who set your account up. We need this to find the right record and to be sure the request is genuinely yours.
We confirm your identity. We will reply to verify it is you before anything is deleted. We may ask one further question that only the account holder could answer.
We delete your data and confirm in writing. Requests are completed within 30 days of verification, and usually far sooner. You will get an email telling you exactly what was removed.

You can also ask your employer's AttendIQ administrator to raise the request on your behalf. Either route reaches the same process.

Deleting the app is not the same as deleting your data

Removing AttendIQ from your phone stops the app from running, but it does not erase the records your employer holds. Use the steps above if you want the data itself removed.

2. What is deleted, and what is kept

AttendIQ is used by employers to meet legal duties on site. Some of what we hold can be erased outright; some of it has to be kept for a set period by law, in which case we strip your identity from it instead.

Data	What happens
Name, email address, phone number, date of birth, National Insurance number, home address, profile photo	Permanently removed. Your name is replaced with "REDACTED".
Face scan and biometric templates used for clock-in	Permanently deleted.
GPS location recorded at clock-in and clock-out	Permanently deleted.
Competency and training records, induction records, right-to-work documents, drug and alcohol test results, medical records, form submissions, timesheet data, site assignments	Deleted immediately for the employer you asked.
Attendance records (the times and site of each clock-in and clock-out)	Kept but de-identified. The record survives for the legally required period with your identity removed, so it can no longer be linked to you.
The audit log entry recording that the deletion happened	Kept indefinitely, as required for compliance.

Retention periods for de-identified records

Where the law requires an employer to keep a record, we anonymise you within it rather than destroy it. The main periods are:

6 years for employment and pay records, required by HMRC.
40 years for health surveillance records, required by the Control of Substances Hazardous to Health Regulations.

Once the retention period expires, the remaining data is permanently deleted. Backup copies are removed as each backup ages out of its rotation, so a deletion applied to the live systems works its way out of the backups as well.

If you work for more than one employer

A deletion request affects only the data held by the employer you name. Records held by any other employer you work for through AttendIQ are untouched, and you would need to make a separate request for each.

3. Your other rights

Deletion is one of several rights you have under the UK GDPR. You can also request a copy of your data, ask us to correct it, or object to how it is processed. The AttendIQ Privacy Policy sets all of these out in full, along with who acts as data controller for each type of record.

If you are unhappy with how we handle your request, you can complain to the Information Commissioner's Office at ico.org.uk.