House Desk user data deletion

This page explains how to ask House Desk (Stow Quill Ltd trading as House Desk) to delete personal data, including data from optional Facebook / Instagram / WhatsApp Socials connections.

Privacy Notice: https://housedesk.co.uk/privacy Data Retention Policy: https://housedesk.co.uk/data-retention Contact: mike@housedesk.co.uk

1. Quick options for pubs using House Desk

### Delete your login (staff and owners)

Anyone signed in can delete their own login from the app:

1. Open My profile (https://housedesk.co.uk/profile). 2. Choose Delete my account and confirm.

This removes your sign-in details (email, mobile, profile photo) and ends access. Workplace records such as timesheets, rotas, holiday and payroll stay on the business for employment, payroll, tax and similar purposes. If you are the only account owner of a business, use Delete this business below first (or add another owner).

### Delete this business (account owners)

Account owners can close the customer account in the app:

1. Sign in as an account owner. 2. Open Admin → Settings → Organisation (https://housedesk.co.uk/admin/settings). 3. Under Delete this business, type the account slug to confirm.

The business is closed immediately and billing is cancelled if active. Customer Data in active systems is scheduled for permanent deletion after 90 days (subject to legal holds, backups and accounting needs), matching our Data Retention Policy. During that period the app blocks normal access; House Desk can re-enable from platform admin if needed.

You can also email mike@housedesk.co.uk with:

• your House Desk account / business name;
• the email used to sign in;
• confirmation that you want the account closed and data erased.

### Disconnect Socials (stops sync and removes tokens)

1. Sign in to House Desk as an account owner or manager. 2. Open Admin → Socials (https://housedesk.co.uk/admin/socials). 3. Choose Disconnect for the venue. 4. House Desk removes the stored access tokens for that venue, stops syncing posts, stops Meta messaging for that venue, and cannot create new boosts.

Cached copies of posts and past boost records may remain until you delete related records, they age out under retention, or the account is closed.

2. Meta (Facebook / Instagram / WhatsApp) connected data

If you authorised House Desk to connect Facebook, Instagram, and/or WhatsApp Business messaging, House Desk may hold:

• Page / Instagram / WhatsApp identifiers and display names;
• server-only access tokens;
• cached copies of recent posts;
• boost campaign metadata and delivery metrics (spend is billed by Meta to your ad account);
• optional links from a post to a House Desk calendar event;
• and Messenger / WhatsApp / Instagram Direct message threads (guest, House AI, and staff replies) when messaging is enabled.

To remove Meta-connected data from House Desk:

1. Disconnect in Admin → Socials (above); and/or 2. Email mike@housedesk.co.uk asking us to delete Socials connection data, cached posts, boost records, and Meta message threads for your account or venue; and/or 3. Revoke House Desk’s access in your Facebook settings (Settings → Business integrations / Apps and websites), then tell us so we can clear remaining stored copies.

Deleting or unpublishing a post on Instagram/Facebook does not automatically wipe the copy already cached in House Desk. Use disconnect or email us if you need that copy removed.

3. Staff and other individuals

If you are a staff member (not the account owner), workplace data in House Desk is usually controlled by your employer or organisation. Use Delete my account on My profile to remove your login; contact your employer first for erasure of workplace records they control.

You can also email mike@housedesk.co.uk. We will explain whether we are processor or controller for the data and how the request will be handled.

4. What we may need to keep

Even after a deletion request we may retain limited data where the law requires it, or where needed for security, fraud prevention, accounting, tax, or disputes — as described in the Privacy Notice and Data Retention Policy.

Workplace records left on an active business after a staff login is deleted remain under the customer’s control for employment, payroll, tax and similar purposes.

5. Response time

We aim to respond to deletion requests without undue delay and within one month where UK GDPR applies, unless a longer period is permitted (for example complex requests). We may ask you to verify your identity or authority before acting.

*Last updated: 07/10/26*