Account and data deletion
Request deletion of your account and data
You can ask us to delete your account and the personal information associated with it, whether or not you still have the application installed.
Applies to applications published by Innosano Pty Ltd: GroundCtrl Sport, GroundCtrl Mining and Digital Passports.
How to make a request
You do not need the application installed, and you do not need to log in.
- Email privacy@innosano.com with the subject line Account and data deletion request.
- Tell us the application name, the email address or mobile number on the account, and the organisation that gave you access, if you know it.
- We will acknowledge your request within 2 working days and may ask you to verify your identity before we act on it, so that we do not delete the wrong person’s record.
You can also make the request by post to the address at the bottom of this page, or by phone on +61 2 8006 8111.
What gets deleted
On a successful request we delete or de-identify the personal information held in your account, including:
- your profile: name, email address, mobile number, date of birth, profile photograph and identifiers
- your authentication credentials and device registrations
- health and assessment information held in your record, subject to the exceptions below
- documents and certificates you uploaded
What we may have to keep, and for how long
We cannot always delete everything immediately. We may be required to retain some information:
- where a law, regulation or statutory health surveillance obligation requires the record to be retained for a set period
- where the record is needed to establish, exercise or defend a legal claim, or is subject to a legal hold
- where the record belongs to the organisation that engaged you rather than to us, in which case we will tell you who to contact
- audit logs recording that an action occurred, which we retain in de-identified form for security purposes
If any exception applies to your request, we will tell you in writing which information we are retaining, why, and when it will be deleted.
Timeframe
| Step | Timeframe |
|---|---|
| We acknowledge your request | Within 2 working days of receipt |
| We complete the deletion, or explain why we cannot | Within 14 days of receipt of a written request |
| Deletion from routine backups | Within 30 days of the deletion |
Before you delete
Deleting your account has consequences. Innosano platforms are provided to your employer, club, contracting entity or medical provider, and your record may be how they demonstrate that you are cleared for work or for play. Deleting it may affect your ability to work or participate. We recommend you discuss it with that organisation first. If you would like a copy of your information before it is deleted, ask for that in the same email and we will provide it.
Other privacy requests
You can also request access to your information, correction of it, de-identification of it, or withdrawal of your consent. See the Privacy Policy.
Contact
Innosano Pty Ltd
Digital Protection Officer
Suite 9, iAccelerate, Innovation Campus, Squires Way
North Wollongong NSW 2500
Australia
privacy@innosano.com