Account & Data Deletion

1. Who this applies to

This page applies to anyone who has used the Yezda mobile app (typically a candidate going through pre-employment screening) or the Yezda customer portal (typically an admin, recruiter or compliance lead at an organisation that has engaged us). It does not cover marketing-site cookies — see our Cookies Policy and Privacy Policy for those.

2. Delete from inside the app

The fastest route is from inside the Yezda mobile app:

1. Open the Yezda app on the device you signed up on.
2. Go to Profile → Settings → Delete my account.
3. Confirm the deletion. You will receive an email acknowledgement to the address on your account.

If you do not see the "Delete my account" option (older app versions or signed-out state), use the email route below.

3. Delete by email

Email info@yezda.co.uk from the email address registered on your Yezda account, with:

• Subject: "Account deletion request".
• Body: your full name as registered, the approximate date you submitted (or the engaging organisation), and confirmation that you want your account and personal data deleted.

We may ask one verification question to confirm you are the account holder before we proceed — this protects against impersonation.

4. Timeline & confirmation

• Acknowledgement: within two working days of receiving your request.
• Completion: within 30 days, in line with UK GDPR Article 12(3). We will email you when deletion is complete.
• Extensions: if a request is unusually complex, we may extend by up to 60 days and will tell you why.

5. What we delete

On a successful deletion request we permanently remove, from our primary systems and backups, the following:

• Account credentials, profile, push notification tokens, mobile sessions.
• Identity documents (passport, driving licence, BRP, residence permit images), selfies and identity-verification records.
• Address history, employment and education history, and any gap-reconciliation notes you submitted.
• Reference contact details and the content of reference responses.
• Self-declaration of unspent convictions and supporting attachments.
• Chat messages between you and your assigned Yezda screener.
• App-usage analytics and event logs tied to your account.

Backups are encrypted and on a 30-day rolling rotation; deleted data is unrecoverable from production immediately and falls out of backups within 30 days of deletion.

6. What we are required to keep

A small set of records is legally retained beyond the deletion request. Where this applies, the data is moved to a restricted audit store, accessible only for the named legal purpose, and purged at the end of the retention window:

• BS7858 case audit trail. If a screening certificate was issued, BS7858:2019 §7 and ICO guidance require the audit trail and certificate to be retained for 7 years from issuance. Personal identifiers within this record are minimised wherever lawful.
• Anti-money-laundering checks. Where AML screening was performed, the Money Laundering Regulations 2017 (reg. 40) require us to retain those records for 5 years.
• Legal, tax & regulatory holds. If your case is subject to dispute, investigation, complaint or court proceedings, retention is extended until those resolve.

After the applicable retention window expires, all remaining personal data is permanently deleted with no further request from you.

7. Records your engaging organisation holds

Where you were screened for an organisation, that organisation received and continues to hold the certificate and the screening summary report we issued to them. Yezda is the data processor for that engagement; the organisation is the controller of the records they hold in their own systems.

To delete records held outside Yezda's systems by your engaging organisation, contact them directly. We will, on request, confirm to you which organisation we issued a certificate to.

8. Contact & complaints

• Deletion requests: info@yezda.co.uk
• General privacy questions: see our Privacy Policy.
• Postal: Yezda Solutions Group Ltd, 12B George Street, Bath, England, BA1 2EH.
• ICO: if you are not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.