1. Purpose
This Policy explains how a VMATIC Shield user can request deletion of personal data associated with the app or website. It applies to services operated by Vmatic Global Technologies Private Limited, subject to any separate enterprise customer agreement.
2. How to Request Deletion
Send an email to business@vmatic.in with the subject “VMATIC Shield Data Deletion Request”. Include the email address or account identifier used with the service, if any, the device/app context needed to locate the record, and a brief description of the request. Do not send passwords, PINs, OTPs, full payment-card details or other authentication secrets.
If an in-app deletion control or a dedicated web request form is available in the current release, users may use that channel instead. The website should provide a clear, accessible route to this policy and the request method. We may ask for proportionate verification to prevent unauthorised deletion, without collecting unnecessary identity information.
3. What May Be Deleted
Subject to verification and legal requirements, deletion may cover account/profile details, user-submitted support content, consent preferences, identifiable diagnostic or security-event data, and other personal data controlled by Vmatic that is no longer needed for a lawful purpose.
Data stored only on the device may be removed by using the app’s clear-data/uninstall functions, where applicable. Uninstalling the app does not necessarily delete data already sent to Vmatic, a hosting provider or an enterprise customer. Data held independently by a bank or other institution must generally be requested from that institution.
4. Exceptions and Limited Retention
We may retain specific records where required or permitted by law, to comply with legal obligations, resolve disputes, establish or defend legal claims, maintain security and abuse-prevention records, or complete an active incident investigation. Retained data will be restricted to the relevant purpose and kept only for the applicable retention period.
Deletion may not be immediate from disaster-recovery backups or immutable security logs. Such data will be protected from ordinary use and removed or overwritten in accordance with the documented backup lifecycle, unless continued retention is legally required.
5. Processing Timeline and Confirmation
We will acknowledge a reasonably complete request and process it within the period required by applicable law. If verification or clarification is needed, the timeline may depend on receiving the required information. We will communicate the outcome or explain any lawful reason why some information cannot be deleted.
The final operational version of this Policy should state a realistic service-level target only after the company confirms its identity-verification process, backup retention schedule and technical deletion capability.
6. Withdrawal of Consent vs. Deletion
Withdrawing consent stops consent-based processing for the relevant purpose, subject to applicable law and any other lawful basis that may apply. It does not automatically erase information already lawfully retained. A deletion request and a consent-withdrawal request can be made together.
7. Enterprise Deployments
Where a bank, NBFC or other enterprise customer controls the relevant personal data, Vmatic may need to refer the request to that organisation or process it according to the contract and documented instructions. The user may need to contact the institution directly for records held in its own systems.
8. Contact and Grievance
For deletion requests or complaints, contact business@vmatic.in with the subject “VMATIC Shield Data Deletion”. Please provide only information reasonably needed to locate and verify the request.
Contact
Vmatic Global Technologies Private Limited
Product: VMATIC Shield
Website: vmaticshield.com
Privacy and policy queries: business@vmatic.in — please use the relevant policy name in the email subject.
↑ Back to top