Data Deletion Instructions

How to request deletion of your personal data from the HexaTech platform.
Last updated: 3 November 2026

FDS Cards Ltd ("HexaTech", "Hotel Tech", "we") operates the platform at app.hexa-tech.uk, including HexaTech Loyalty (formerly Hotel Loyalty), HexaTech Staff, the legacy Hotel Staff app, and integrations with third-party services including Facebook Messenger. This page explains how individuals can request deletion of personal data that we hold about them.

For background on what data we collect and why, please read our Privacy Policy.

Delete a mobile app account

In HexaTech Loyalty, open More → Profile → Delete account and follow the confirmation steps. You can also request deletion by email below without reinstalling or signing in to the app.

For HexaTech Staff, use the email request below to request deletion of your staff account. Identify the venue or organisation so we can locate the correct account. Removing a staff account does not delete the organisation's other members, staff or business records.

To request deletion of specific personal data while keeping your account, describe the data in your email. The identity-verification steps and retention exceptions below apply to these requests too.

Who is this page for?

There are two categories of individuals whose data may be held in our systems, and each has a different deletion path:

1. End users (hotel guests, app members, lead form submitters)

If you interacted with a hotel that uses our platform — for example, you joined their loyalty program, made a booking through their widget, chatted with their AI assistant, submitted a lead form, sent a Facebook Messenger message to their Page, or downloaded their member app — your personal data is processed by us as a data processor on behalf of that hotel (the data controller).

To request deletion, contact the hotel directly first. They control your data and can usually action the deletion immediately from their admin tools.

If the hotel cannot be reached or does not respond within a reasonable time (typically 30 days), you may contact us directly using the email instructions below and we will:

• Verify your identity using the contact details on file (email or phone).
• Notify the controlling hotel of your request.
• Delete your data from our systems within 30 days of verification, except where retention is required by law (e.g. for accounting or fraud prevention).

2. Hotel staff or administrators

If you are a staff member of a hotel that uses our platform and you have an admin login, you can delete your own account from Settings → Account → Delete account in the admin panel. Account deletion removes your personal admin profile but does not delete your hotel's tenant data, which remains under the control of the hotel.

How to submit a deletion request to us

Please include in your message:

• The hotel or business through which we hold your data (if known).
• The email address or phone number associated with your account or interactions, so we can locate your records.
• Any other identifiers that may help us find your data (e.g. loyalty membership number, booking reference, Facebook user ID if your request relates to Messenger interactions).
• A statement confirming that you are the data subject or are authorised to act on their behalf.

What happens after you submit

1. We acknowledge receipt within 5 business days.
2. We verify your identity. We may ask you to confirm details via the email or phone number on file.
3. We locate all personal data associated with your identifiers across our platform: chat conversations, lead records, booking history, loyalty membership, mobile app account, and any third-party integration data (e.g. messages received via Facebook Messenger from your Facebook account).
4. We delete the data within 30 calendar days of identity verification.
5. We send a confirmation email when deletion is complete.

What we may retain

Some data may be retained beyond deletion of your account where required by law or for legitimate business purposes:

• Accounting and tax records (UK law typically requires retention of transaction records for 6 years).
• Fraud prevention records retained for the minimum necessary period.
• Backup snapshots may contain your data for up to 90 days before they are overwritten. Data in backups is not actively processed.
• Anonymised analytics data from which you can no longer be identified.

Facebook / Meta data specifically

If your deletion request relates to data we hold about you because you sent messages to a hotel's Facebook Page that uses our integration:

• We will delete the chat conversation records, your Facebook Page-Scoped User ID (PSID), and any attached media that was downloaded from Meta's CDN.
• Note that Facebook itself also retains copies of these messages independently. To request deletion from Facebook directly, contact Meta at https://www.facebook.com/help/contact/507739850846588.

Your rights

Under the UK GDPR and EU GDPR you have the right to:

• Request access to your data (Subject Access Request).
• Request rectification of inaccurate data.
• Request deletion ("right to be forgotten") as described above.
• Restrict or object to certain processing.
• Data portability (receive a copy of your data in a machine-readable format).
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Contact

FDS Cards Ltd — Data Protection Officer
Vitalijs Kolotikovs
Email: vitaly@fds-cards.co.uk
General contact: info@fds-cards.co.uk
25 Cabot Square, Canary Wharf, London E14 4QZ, United Kingdom