Account & Data Deletion Policy

Depending on the circumstances and applicable Philippine privacy law, you may have the right to request the deletion, blocking, restriction, anonymization, or other appropriate handling of personal information relating to you. A valid request may apply, for example, where personal information is no longer necessary for the purpose for which it was collected, is inaccurate, incomplete, outdated, or unlawfully obtained, is being used for an unauthorized purpose, is being processed unlawfully, or is otherwise subject to an applicable right to erasure or blocking.

Deletion rights are not absolute. Certain information may still need to be retained where continued processing remains lawfully necessary.

ConfirmPH distinguishes between several different actions:

• Delete account: begins the process of permanently closing the account and deleting or anonymizing eligible associated personal information
• Delete specific data: requests removal, anonymization, blocking, or restriction of particular eligible information without necessarily closing the entire account
• Deactivate account: stops or restricts account access while information may remain stored. Deactivation is not the same as deletion
• Hide a Business: stops or reduces the public visibility of a Business profile or listing. Hiding a Business is not the same as deleting the Business account

Remove me from a Business: removes a Business User's access or association with a Business workspace where appropriate. This does not automatically delete the entire Business or its historical records.

These terms are not used interchangeably in the ConfirmPH interface.

ConfirmPH provides a self-service deletion path inside the account: for a business owner, under Settings → Delete account; for a renter/customer, in your account's booking area. Choosing to delete triggers the process described in this Policy, for a Business, public visibility is removed immediately, and the underlying data enters the retention period described in Section 21 before permanent deletion or anonymization.

If you cannot access your account or the self-service deletion option, you may use the official ConfirmPH Contact or Support process to request deletion instead.

You may also request deletion, correction, blocking, anonymization, or restriction of specific eligible personal information without closing your entire account. Depending on the circumstances, this may include account-profile information, contact information, uploaded photographs, uploaded documents, notification subscriptions, selected user-submitted Content, certain public profile information, or other personal information associated with you.

Some information may need to remain where ConfirmPH, a participating Business, or another authorized party has a lawful reason to retain it.

ConfirmPH may verify your identity or authority before processing a deletion request. This helps prevent deletion of another person's account, unauthorized Business deletion, improper deletion of staff information, account-takeover abuse, fraudulent privacy requests, or disclosure of information about another person.

Verification is proportionate to the sensitivity and scope of the request. Where possible, ConfirmPH uses information or authentication methods already associated with the account: such as account re-authentication, password confirmation, email verification, phone or OTP verification, recovery through a verified account channel, or confirmation of Business-owner or administrator authority, rather than routinely requiring substantially more personal information than reasonably necessary. If identity or authority cannot reasonably be verified, the request may be delayed, limited, or declined.

When an eligible Customer or renter account is deleted, ConfirmPH may delete or irreversibly anonymize eligible account information such as name, email address, phone number, authentication credentials, active sessions, account preferences, remembered devices, notification subscriptions, profile information, and unnecessary account metadata.

Deletion of the Customer account does not necessarily mean every historical booking or rental record disappears. A participating rental Business may have a lawful reason to retain limited information connected to an actual rental or transaction.

Certain historical rental information may need to remain where reasonably and lawfully necessary, including booking dates, booking reference, vehicle information, rental terms, Customer Confirmation records, payment, advance or security-deposit records, pickup or return history, incident information, dispute-related information, or other necessary transaction history.

In particular, a booking agreement version that was accepted, the evidence of that acceptance, release and return snapshots and condition records, damage cases, insurance claims, disputes, and accounting references for charges, deposit applications and refunds are records of what actually happened in a transaction. Where there is a legitimate or legal recordkeeping basis (for example, a business's accounting obligations, or establishing or defending a claim about the rental), they may need to remain after a Customer account is deleted.

Where continued identification of the Customer is no longer necessary, ConfirmPH may remove, anonymize, pseudonymize, or otherwise minimize identifying information while preserving the legitimate underlying record. For example, a historical booking may remain while direct Customer identifiers are removed or replaced where technically and legally appropriate. ConfirmPH does not promise that every historical booking will automatically become "Deleted User": the appropriate treatment depends on why each field still needs to exist.

Deleting your personal Business User account does not automatically delete the Business workspace or records belonging to that Business. For example, if you are a manager, staff member, administrator, contractor, or one of several Business owners, you may be able to request removal of your personal access and eligible personal information without deleting the entire Business.

Requests to delete an entire Business account must be made by a person ConfirmPH reasonably verifies as authorized to act for that Business. The product distinguishes "Remove me from this Business" from "Delete this Business account": these actions have different consequences.

An authorized Business owner or representative may request deletion of a Business account. Choosing to delete a Business immediately hides its public listing, public profile, public vehicles, and any connected website: those go dark right away, not after a delay. Ending staff access and disabling new inquiries or booking requests also take effect immediately.

The underlying business data: bookings, vehicles, staff records, inspections, warnings, and related records: is then retained for 3 months (as a safeguard for open disputes, security review, and legal or account-recovery needs) before being permanently deleted or anonymized where possible.

Business deletion does not automatically erase every historical record associated with the Business. Limited information may need to remain longer where continued retention is lawfully necessary for purposes such as accounting or tax obligations, subscription or billing records, an unresolved Customer transaction, an open payment dispute or chargeback, fraud or security prevention, an unresolved report or investigation, establishment, exercise, or defense of legal claims, review integrity where a lawful basis remains, or another specific lawful retention purpose. ConfirmPH does not rely on vague phrases such as "platform integrity" as a catch-all reason to retain information indefinitely.

This includes Finance & Books records, Legal Readiness evidence and its review history, audit records, and open damage cases, insurance claims and disputes. Closing a Business account does not hard-delete posted accounting journals: posted accounting records are kept for the period accounting and tax rules require, and are corrected only by reversal or adjustment, never by disappearing.

ConfirmPH may delay or limit part of a deletion request where specific information remains reasonably necessary for an unresolved matter, for example:

• an active rental or an unresolved booking
• a security deposit or refund that has not been settled
• an open damage case
• an open insurance claim
• an open dispute or platform complaint
• a rental that still needs financial reconciliation
• a payment dispute or an open chargeback
• a fraud investigation, security incident or abuse report

a legal claim; or

another matter where continued processing has a lawful basis.

Where appropriate, ConfirmPH may disable public access or account functionality while preserving only the information necessary for the unresolved matter. When the reason for retention ends, the information is handled according to the applicable retention and deletion rules.

Removing or deleting a staff account is different from deleting every historical action performed by that staff member. When a staff account is removed, ConfirmPH may delete or anonymize eligible information such as login access, authentication credentials, active sessions, notification subscriptions, personal account preferences, and unnecessary profile information.

However, historical Business records may still need to show that an authorized staff action occurred, for example, that a booking status was changed, an inspection was completed, a vehicle was reassigned, a condition record was created, or another operational action occurred. Where the staff member's identity is no longer necessary, ConfirmPH may minimize or anonymize identifying information while retaining the underlying audit event. Where ConfirmPH processes staff information on behalf of a participating Business, ConfirmPH may need to coordinate the request with that Business depending on the applicable privacy roles.

A Business may be able to reduce or remove its public visibility without deleting its ConfirmPH account. Depending on available features, a Business may be able to hide itself from Discover Rentals, disable public booking requests, hide selected vehicle listings, remove public photographs, disable a public Business page, or update public information.

These actions affect public visibility. They do not automatically delete internal Booking Records, Customer records, billing information, staff records, security logs, audit history, or other private Business information.

Authorized users may request deletion of eligible files they uploaded, including profile photographs, logos, vehicle photographs, inspection photographs, damage photographs, Business documents, support attachments, identification files, or other uploaded material.

This includes driver licence images, International Driving Permit or translation evidence, Legal Readiness evidence (permits, registrations and similar), and damage or claim evidence. These are held in private storage and are never public.

A file may need to be retained temporarily where it is directly relevant to an unresolved legal claim, fraud investigation, security incident, safety matter, billing dispute, active rental dispute, open damage case or insurance claim, or another lawful retention purpose. A file that evidences a past decision (for example, the licence behind a release decision) may be kept for as long as that decision record needs it; a raw image may justify a shorter period than the decision record. Continued retention must have a specific lawful basis and should not continue longer than necessary.

Deleting an account does not automatically require deletion of every review associated with that account. Depending on the circumstances and applicable law, ConfirmPH may delete the review, anonymize the reviewer, remove direct personal identifiers, hide the review, retain the review where a valid lawful basis remains, or retain limited moderation or abuse-prevention records separately.

A review should not remain personally identifiable merely because ConfirmPH would prefer to keep the Customer's identity attached to it. The appropriate result depends on privacy rights, review integrity, fraud prevention, legal obligations, rights of other users, and the specific reason the information remains necessary. See the Reviews & Ratings Policy for additional review rules.

Support cases, security reports, abuse reports, and moderation records may contain personal information. Some of these records may need to remain after account deletion where reasonably necessary to investigate fraud, prevent repeated abuse, address a security concern, resolve an active dispute, defend a legal claim, document a moderation decision, or comply with another lawful obligation.

Where complete identifying information is no longer necessary, ConfirmPH considers whether it can be removed, minimized, anonymized, pseudonymized, or access-restricted.

Two kinds of financial record are involved, and they are handled separately:

ConfirmPH's own subscription records (invoices where ConfirmPH issues them, payment confirmations, transaction references, subscription history, payment status, refund and cancellation records); and

each rental business's own accounting records in Finance & Books (journals, ledgers, charges, deposit applications, refunds and their audit history), which belong to that business and are kept under that business's own accounting and tax obligations.

Deleting a ConfirmPH account does not necessarily delete information that must or may lawfully be retained for billing, accounting, taxation, invoices, payment disputes, refunds, chargebacks, or financial audits. Posted accounting journals are corrected by reversal or adjustment; they do not simply disappear.

These records are retained only for the period supported by applicable law, accounting requirements, tax requirements, or another legitimate retention purpose.

Limited security or audit information may be retained after account deletion where reasonably necessary for purposes such as fraud prevention, security investigations, abuse prevention, unauthorized-access investigations, enforcement records, legal claims, or another lawful security purpose. Security and audit data is not retained indefinitely simply because it may theoretically become useful later: ConfirmPH applies a defined internal retention schedule to these records.

Deleting personal information from active systems does not always mean every backup copy disappears immediately. When information is deleted from active systems, copies may remain temporarily in protected backups until those backups expire according to ConfirmPH's backup-retention schedule, unless continued retention is otherwise lawfully required.

Backup copies containing deleted information are not used for ordinary active processing. If ConfirmPH restores a backup that contains information previously deleted or anonymized, ConfirmPH uses appropriate processes to reapply the relevant deletion or anonymization actions. Backups are not a permanent exemption from deletion.

Where applicable, deletion requests may also affect analytics or derived information associated with an identifiable User. Information that has been genuinely and irreversibly anonymized so that it no longer identifies an individual may no longer constitute personal information in the same way.

ConfirmPH may retain properly anonymized aggregate information for purposes such as service analytics, reliability, product improvement, statistical reporting, or security analysis, where that information can no longer reasonably identify the deleted User.

For clarity, ConfirmPH distinguishes among the following:

• Public removal: a listing, profile, vehicle page or connected website is no longer shown to the public. The account and its data still exist. This on its own is not deletion (see Section 12)
• Deactivated: the account can no longer be used, but associated information may still remain. Deactivation alone does not count as account deletion
• Deletion requested: you have chosen to delete and ConfirmPH has accepted the request. Public visibility and account access end immediately, but the underlying data has not yet been erased
• Pending deletion (currently a 90-day window): the account's data sits in the retention period described in Section 21. It is no longer publicly visible or usable, but it has not yet been permanently deleted, so it may still be retrievable internally if the deletion needs to be reversed or an unresolved matter requires it
• Deleted (operational deletion): information is removed from the relevant active system in accordance with the applicable deletion process. This happens at the end of the pending-deletion window, not at the moment you click delete
• Anonymized: information is altered so that it no longer identifies the individual and cannot reasonably be reversed to re-identify them

Retained (lawful archival retention): specific records remain beyond deletion because a specific lawful reason (accounting, tax, an accepted rental agreement, an open dispute or claim, fraud prevention, and similar) requires or permits continued processing. See Sections 7, 9, 16, and 17.

In short: choosing to delete does not mean instant permanent erasure. It means immediate hiding and loss of access, followed by the pending-deletion window, followed by permanent deletion or anonymization. The specific categories described in this Policy may still be lawfully retained, subject to the backup-expiry timing in Section 18.

ConfirmPH acknowledges verified deletion requests promptly. Choosing to delete an account or Business immediately removes its public visibility (listing, profile, vehicles, connected website) and ends active access. The underlying data then enters a 3-month (90-day) retention period: kept in case of booking disputes, security review, or legal/account-recovery needs, after which it is permanently deleted or anonymized where possible.

This timeline may be extended where a request is affected by unresolved identity or authority verification, an active transaction, legal obligations, an unresolved dispute, a fraud or security investigation, technical complexity requiring additional time, or another lawful reason for delay. If ConfirmPH cannot delete particular information, it explains the relevant reason where appropriate.

After an eligible account deletion is completed:

• account access ends
• active sessions are invalidated
• eligible profile information is deleted or anonymized
• eligible notification subscriptions are removed
• eligible public profile information is removed
• applicable connected access is disabled
• and retained information is limited to categories for which a lawful basis remains

Where appropriate, ConfirmPH may provide confirmation that the deletion request has been completed or explain that certain limited information remains subject to lawful retention.

If the deletion process has not yet been completed, ConfirmPH may allow a User to withdraw the request where technically and operationally possible. Once information has been permanently deleted or irreversibly anonymized, ConfirmPH may not be able to restore it. Users should review any deletion warning carefully before confirming the request.

Deleting a ConfirmPH account does not automatically cancel an existing rental agreement, erase money owed between a Customer and Business, resolve an open damage dispute, cancel a legitimate refund obligation, eliminate tax or accounting obligations, terminate an independent agreement outside ConfirmPH, or remove rights or responsibilities that already arose before deletion. Those matters remain governed by the applicable agreement, law, and relevant ConfirmPH policies.

Where a deletion request concerns a child or another person whose rights are lawfully exercised by a parent, guardian, or authorized representative, ConfirmPH may require appropriate verification of that authority. ConfirmPH only requests the information reasonably necessary to verify the request.

Deletion is only one possible privacy right. Depending on applicable law, Users may also have rights relating to access, correction, objection, blocking, restriction, data portability, withdrawal of consent where applicable, or complaints to the National Privacy Commission. See the Privacy Policy for more information.

ConfirmPH may update this Account & Data Deletion Policy as the platform changes, deletion functionality changes, retention practices change, legal requirements change, app-store requirements change, security requirements change, or related ConfirmPH policies change. The Last updated date identifies the latest revision. Where applicable law requires additional notice or consent for a material change, ConfirmPH will use an appropriate process.

For deletion requests, deletion problems, privacy-rights requests, account-access issues, questions about retained information, or questions about this Policy, use the official ConfirmPH Privacy Request, Contact, or Support process.

You can request deletion of your ConfirmPH account and eligible personal information through Settings inside your account, or through Contact/Support if you cannot access your account. Deleting a Business immediately hides its public listing, profile, vehicles, and connected website; deleting a renter/customer account ends access immediately.

The underlying data: bookings, vehicles, staff records, inspections, warnings, and related records: is then kept for 3 months as a safeguard for disputes, security review, and legal/account-recovery needs, after which it is permanently deleted or anonymized where possible.

Deleting an account does not necessarily mean every historic record disappears immediately. Limited information may still need to remain longer where lawfully necessary for accounting or tax requirements, unresolved rentals or transactions, disputes or chargebacks, fraud or security prevention, legal claims, review or moderation integrity where a valid basis remains, or another specific lawful retention purpose.

Deactivate is not the same as delete. Hide Business is not the same as delete Business. Delete my Business User account is not the same as delete the entire Business workspace. Backups are not permanently exempt from deletion.