Account & Data Deletion
At Kmbal, we are committed to protecting your privacy and ensuring transparency in how we handle your data. This page explains how you can request account and data deletion, what types of data can be deleted, and what data we are legally required to retain.
Types of Data That Can Be Deleted Upon Request
Users can request the deletion of the following data, which is not legally required to be retained:
-
- Marketing & Communication Preferences
-
- Newsletter and promotional email/SMS consent
-
- Contact preferences (opt-in/out choices)
-
- Marketing & Communication Preferences
-
- User Activity Data (If Not Linked to Compliance Obligations)
-
- Website or app analytics (e.g., browsing behavior, clicks)
-
- Non-essential cookies and tracking data
-
- Device or location data (unless required for fraud prevention)
-
- User Activity Data (If Not Linked to Compliance Obligations)
-
- Support & Feedback Records
-
- Customer service inquiries or chat history (if not related to compliance)
-
- Product feedback and survey responses
-
- Support & Feedback Records
-
- Non-Transactional Account Information
-
- Profile details not required for identity verification (e.g., avatar images, display preferences)
-
- Stored payment methods (unless required for regulatory tracking)
-
- Non-Transactional Account Information
Types of Data That Must Be Retained
Certain data is required to be retained under HMRC anti-money laundering (AML) regulations and GDPR. The following data cannot be deleted upon request and will be retained for a minimum of five years after the last transaction:
-
- Customer Due Diligence (CDD) Data
-
- Identity verification documents (e.g., ID, proof of address)
-
- Customer Due Diligence (CDD) Data
-
- Transaction History
-
- Records of all financial transactions
-
- Necessary for financial reporting, fraud prevention, and regulatory audits
-
- Transaction History
-
- Risk Assessments & Compliance Records
-
- Documents related to AML monitoring and regulatory obligations
-
- Risk Assessments & Compliance Records
Note: The “right to be forgotten” under GDPR does not override legal obligations to retain these records.
How to Request Account & Data Deletion
To request account and data deletion, please follow these steps:
-
- Visit our Contact Us page at https://kmbal.com/contact-us/
-
- Submit a request stating that you would like to delete your account and personal data.
-
- Our team will verify your identity and process your request.
-
- You will receive a confirmation once the deletion request has been completed.
Questions?
If you have any questions about this policy or need further assistance, please contact us at https://kmbal.com/contact-us/.
We are committed to handling your data responsibly and in compliance with all legal requirements.