User Data Deletion Instructions

1. Submit a deletion request

Choose either method below. You do not need to send the request twice.

Method A — Customer account

1. Sign in to your BIMO CLOUD customer account.
2. Open Privacy requests.
3. Select Deletion, add any useful scope details and submit.
4. Return to the same page to view the request status.

Method B — Email

Email hello@bimo.demo with the subject Data deletion request. Include:

• your full name;
• the phone number or email address used with BIMO CLOUD;
• whether the request relates to the website, customer account, Meta, Facebook or WhatsApp;
• any relevant order, invoice or support reference; and
• a clear description of the information or account you want deleted.

Never send your password, payment PIN, one-time code, full card number or a copy of an identity document unless our privacy team gives you a secure and proportionate verification method.

2. Remove Meta or Facebook access

If you connected an applicable Meta or Facebook account to an BIMO CLOUD app, you may also remove future platform access:

1. Open Facebook or Meta Settings & privacy.
2. Open Settings, then Apps and Websites or the equivalent connected-apps section.
3. Select the BIMO CLOUD app and choose Remove.
4. Submit a deletion request using Method A or B above if you also want eligible information removed from BIMO CLOUD systems.

Removing the platform connection prevents future access through it. It does not by itself erase an order, payment, invoice, warranty or other record that BIMO CLOUD must lawfully retain.

3. Identity verification

We verify that a requester is the person concerned or an authorised representative before deleting or disclosing information. Verification may use an existing signed-in session, a confirmation sent to a previously verified phone or email, transaction details known to the customer, or another proportionate method.

If we cannot safely verify the request, we will explain what additional information is needed without asking for unnecessary sensitive data.

4. What happens next

1. We record and acknowledge the request.
2. We verify identity and clarify its scope if needed.
3. We identify information held in customer, communication, storefront and operational systems.
4. We delete or anonymise eligible information and instruct relevant processors where applicable.
5. We notify you of completion, a lawful retention exception, or any further action required.

Requests are handled within applicable legal time limits. Complex requests or records connected to an active dispute, fraud investigation or legal obligation may require additional review.

5. Information we may retain

Deletion rights are important but not absolute. We may retain limited information where necessary to:

• complete an active order, refund, warranty claim or dispute;
• meet accounting, tax, payment, audit or other legal obligations;
• establish, exercise or defend legal claims;
• detect fraud, abuse or security incidents; or
• maintain a minimal suppression record so an opt-out is respected.

Retained information remains restricted to the applicable purpose and is deleted or anonymised when that purpose and retention obligation end.

6. Scope and contact

These instructions apply to information controlled by BIMO CLOUD. They do not delete information independently controlled by Meta, WhatsApp, a payment provider, bank, mobile-money operator or another third party. Submit a separate request to that provider under its privacy process where necessary.