Data Deletion

Last updated: 29 April 2026.

This page explains how to ask Grid Social to delete the personal data we hold about you. It covers data we collected directly (e.g. through the £97 audit checkout, a subscription, or our website forms) and data we received from Facebook or Instagram when you connected those accounts to Grid Social.

What gets deleted

When we receive a verified deletion request we erase, within 30 days:

Your account record, profile details and login credentials
Any OAuth tokens we held for connected platforms (Facebook Pages, Instagram, LinkedIn, TikTok, Pinterest, Google Business Profile)
Any content you scheduled or published through Grid Social that has not yet been sent to a third-party platform
Any audit PDFs, looms, working notes or submissions tied to your account
Email and support correspondence beyond what we are legally required to retain

What we are required by law to keep, and for how long:

Invoices and tax records — 7 years (Companies Act 2006 s388, HMRC requirement)
Records of the deletion request itself — 1 year, as proof we honoured your request

What we cannot delete:

Content you already published to Facebook, Instagram or other platforms — that lives on those platforms and must be deleted there directly
Backups already created before your request — these are overwritten on a 30-day cycle and your data will be purged within that window

How to request deletion

Method 1

Email us

Send an email to hello@gridsocial.co.uk with the subject line "Data deletion request". Include:

The email address on your Grid Social account (or the one you used to buy the audit)
The connected Facebook/Instagram/etc. account if applicable
Whether you want full deletion or only the third-party platform data

We respond within 5 working days and confirm completion within 30 days. Free of charge.

Method 2

Submit the form below

Use this form if you'd rather not write an email. We treat it as the same request type.

Identity verification

We may need to verify it is really you before we delete an account. We do this lightly — usually by replying to the request from the email address linked to the account, or by asking one piece of corroborating detail (last invoice number, business name, etc.). This is to stop someone else closing your account on you. We will never ask for a password.

Confirmation timeline

Under UK GDPR Article 17 we have one calendar month to respond. In practice we aim for under 5 working days for the initial confirmation and under 30 days for full deletion. You will receive an email at each stage.

For Meta App reviewers

Data Deletion Callback URL: https://grid-social-autoposter.netlify.app/api/meta-deletion

This endpoint accepts a Meta-signed POST per the Meta Data Deletion Callback specification, verifies the HMAC-SHA256 signature with our App Secret, decodes the user_id from the payload, and returns the required JSON shape: { "url": "...", "confirmation_code": "..." }.

Tokens are held per-Page rather than per-user, so we record the deletion request, log it for the admin to remove the linked Page tokens within 30 days, and respond within Meta's required window.

Your wider rights

This page is specifically about deletion (UK GDPR Article 17 — right to erasure). For your other rights — access, rectification, portability, restriction, objection — see our Privacy Policy §7.

You can also lodge a complaint with the Information Commissioner's Office at ico.org.uk/make-a-complaint or 0303 123 1113 if you are not satisfied with how we handle your request.

Contact

Email: hello@gridsocial.co.uk
Post: A Mackay (Publisher) Ltd, 87 Knightscliffe Avenue, Glasgow, G13 2RX, United Kingdom