Deleting your data

01Work out which one you are

What we hold depends on how you came across us, and it changes what to tell us.

02How to ask

Email privacy@spotlightbuilt.com. There is no form to fill in and no account to create. Put in:

  • What you want: everything deleted, or just one thing (a call recording, say)
  • The phone number or email address on the record, so we can find it
  • If it was a form on a business’s website, which business, if you remember

Send it from the email address on the record where you can, or from the phone if you would rather text. If you cannot, we will ask you a question or two to be sure, because handing somebody’s contact details to the wrong person is the failure that matters most here.

03What happens next

  • Within 5 business days we confirm we have your request and tell you what we found.
  • Within 30 days it is done, and we confirm what was removed.
  • If we hold nothing about you, we say that. It is a common and completely reasonable outcome.

A deletion is a real deletion, not a hidden flag. Where a record has to stay for one of the reasons below, we say which parts stayed and why rather than quietly leaving them.

04What we cannot delete, and why

Four honest exceptions. Each one is narrow and none of them is a way of keeping your contact details.

  • What has already reached the business you contacted. If you enquired with a plumber, your details were emailed to that plumber within seconds. We can delete our copy; theirs is theirs, and you would need to ask them. We will tell you who they were.
  • Financial records. Invoices and payment records have to be kept for tax and accounting. This applies to clients, not to people who filled in a form.
  • Records that you asked us to delete. We keep a note that a request was made and honoured. That is the only way to prove we did it.
  • Security logs. Records of sign-ins and administrative actions are append-only, and hold no contact details for anyone who is not an account holder.

05If you came from a Facebook or Instagram ad

We run advertising for our clients on Meta’s platforms, so this section is here because people arrive at it looking for the Facebook-specific answer.

We do not use Facebook Login and we never receive your Facebook account information. There is no Spotlight app connected to your Facebook profile to disconnect, and nothing to revoke.

If you clicked one of our clients’ ads and then filled in a form, what we hold is the form submission described in section 1, and the request process is the same: email privacy@spotlightbuilt.com.

If you filled in a form insideFacebook or Instagram rather than on a website, Meta holds a copy of that too. Deleting ours does not delete theirs, and Meta’s own settings are the place for that.

06Stopping texts or calls without deleting anything

If you just want the messages to stop, that is quicker. Reply STOP to any text and it ends immediately and permanently. You do not need to email anybody, and it takes effect straight away rather than within 30 days.

Stopping messages leaves your record in place. If you want both, say so and we will do both.

07If you are a Spotlight client

Before you ask us to delete your account, export your enquiry data from your account page. It is a spreadsheet of every enquiry your site produced, and it is yours to keep. Once your account is deleted we cannot get it back for you.

Deleting your account does not by itself cancel billing. See how cancelling works, which is a date rather than a notice period.