Data Deletion - Karbon Creative

Data Deletion Instructions

Karbon Creative Ltd and Karbon Portal
Last updated: 27/07/2026

This page explains how to request the deletion of personal data, Karbon Portal account information, connected-platform data and reporting information held by Karbon Creative Ltd.

These instructions apply to information associated with:

Karbon Portal user accounts;
Google Analytics 4 connections;
Google Ads connections;
Facebook Pages;
Instagram professional accounts;
Meta advertising accounts; and
client reporting data held within Karbon Portal.

1. How to Submit a Data Deletion Request

To request deletion of your information, email:

info@karboncreative.co.uk

Please use the subject line:

Karbon Portal Data Deletion Request

Include the following information where possible:

your full name;
your company or organisation;
the email address associated with your Karbon Portal account;
the client account to which the request relates;
the platform involved, such as Google, Facebook, Instagram or Meta Ads;
the name or identifier of the relevant account, property, Page, profile or advertising account;
a description of the information you would like deleted; and
confirmation that you are authorised to make the request.

Please do not send passwords, access tokens, authentication codes, client secrets or other account credentials by email.

2. Verifying Your Request

Before deleting information, we may need to verify:

your identity;
your relationship with the relevant company or client;
your authority over the connected account;
the Karbon Portal account associated with the request; and
the precise scope of the information you want deleted.

We will not delete information or disconnect an integration following a request from someone who cannot demonstrate appropriate authority over the relevant account or organisation.

We may contact the authorised administrator of the relevant client or connected-platform account before completing the request.

3. Information You Can Ask Us to Delete

Depending on your relationship with Karbon Creative and the nature of the request, you may ask us to delete:

your Karbon Portal user profile;
your Karbon Portal authentication account;
your access to a client or organisation within Karbon Portal;
stored Google or Meta connection credentials;
client-specific connected-platform assignments;
Google Analytics reporting information;
Google Ads reporting information;
Facebook, Instagram or Meta advertising reporting information;
client reports and stored metric values;
dimension and breakdown data;
notifications and other records connected to a permanently deleted client; and
other personal information held by Karbon Creative, subject to applicable legal requirements.

4. Portal Account Deletion

Removing access

Removing access to Karbon Portal prevents the user from accessing the relevant company or client account.

Removing access does not automatically delete the user’s profile or authentication account.

Permanently deleting an account

A permanent account-deletion request removes the user’s authentication account and portal profile.

Some historical business records may be preserved where necessary to maintain the integrity of previous work, jobs, comments or files. Where applicable, the user’s name may be replaced with a generic label such as “Deleted user”.

5. Google Data Deletion

You may request deletion of information connected with Google Analytics 4 or Google Ads, including:

the Google account identifier associated with the connection;
the display name or email address used to label the connection;
stored OAuth access and refresh tokens;
Google Analytics accounts and properties assigned to a client;
Google Ads accounts assigned to a client;
website analytics and performance metrics;
advertising performance metrics; and
client reports containing Google-derived data.

Disconnecting a Google integration

When an authorised administrator disconnects a Google integration through Karbon Portal:

Karbon Portal attempts to revoke access with Google;
the local connection record is deleted;
stored access and refresh tokens are permanently deleted;
future Google API requests through that connection stop;
the link between the connection and its discovered accounts or properties is removed; and
accounts or properties that no longer have a valid connection are marked inactive.

You may also revoke Karbon Portal’s access directly through the third-party access or connected-app settings within your Google Account.

6. Facebook, Instagram and Meta Data Deletion

You may request deletion of information connected with Meta platforms, including:

the Facebook user identifier and name associated with the connection;
stored Meta access tokens;
stored Facebook Page access tokens;
Meta Business account information;
Facebook Page assignments and reporting information;
Instagram professional-account assignments and reporting information;
Meta advertising-account assignments and reporting information; and
client reports containing Meta-derived data.

You may request deletion of information connected with Meta platforms, including:

the Facebook user identifier and name associated with the connection;
stored Meta access tokens;
stored Facebook Page access tokens;
Meta Business account information;
Facebook Page assignments and reporting information;
Instagram professional-account assignments and reporting information;
Meta advertising>

To help us identify the correct information, please include the names of the relevant Facebook Page, Instagram account, Meta Business account or advertising account in your request.

Disconnecting a Meta integration

When an authorised administrator disconnects a Meta integration through Karbon Portal:

Karbon Portal attempts to revoke the application’s permissions with Meta;
the local connection record and stored user access token are deleted;
associated Page access tokens are removed with the connection links;
future Meta API requests through that connection stop;
the links between the connection and its discovered assets are removed; and
assets that no longer have another valid connection are marked inactive.

You may also remove Karbon Portal through the connected-app or business-integration settings within your Facebook or Meta account.

7. Shared Connections

Some Google or Meta connections may provide authorised access to accounts used for more than one Karbon Creative client.

We will not disconnect or delete a shared connection where doing so would remove another client’s authorised access.

Where a connection is shared, we may instead:

remove the requesting client’s asset assignments;
remove the requesting client’s reports and reporting data;
prevent the connected account from being used in that client’s future reports; and
retain the underlying connection solely for other clients who remain authorised to use it.

8. Historical Reports and Downloaded Files

Disconnecting a platform does not automatically delete reporting information that has already been incorporated into historical client reports.

Historical reporting information may be retained:

as part of our contractual reporting record;
to maintain previous client reports and comparisons;
to comply with legal, accounting or regulatory obligations;
to establish, exercise or defend legal claims; or
where another lawful reason for retention applies.

You may specifically request deletion of historical reporting information. We will review the request and explain whether any information must be retained and why.

PDF reports are generated and downloaded to the user’s own device. Once downloaded, copies held by the user, client or another authorised recipient are outside the direct control of Karbon Portal.

9. Security, Diagnostic and Audit Records

We may retain limited security, diagnostic or audit information after completing a deletion request where this is reasonably necessary to:

record that the request was received and completed;
demonstrate compliance with our legal obligations;
investigate security incidents or misuse;
protect Karbon Creative, our clients and portal users; or
establish, exercise or defend legal claims.

Any retained information will be limited to what is reasonably required for those purposes.

10. What Happens After We Receive Your Request

After receiving a data-deletion request, we will:

acknowledge the request;
verify the requester’s identity and authority where necessary;
confirm the accounts, platforms and information covered by the request;
determine whether any legal or contractual retention requirements apply;
complete the appropriate deletion, disconnection or access-removal actions; and
confirm the outcome to the requester.

We will respond without undue delay and generally within one month of receiving a valid request.

Where a request is particularly complex or covers several accounts or systems, additional time may be required. If this applies, we will explain the reason for the delay and provide an updated timescale.

11. When Information May Be Retained

The right to deletion is not absolute. We may need to retain some information where it is necessary to:

comply with a legal obligation;
maintain accounting, taxation or regulatory records;
fulfil contractual obligations;
protect the rights and security of our clients or users;
establish, exercise or defend legal claims;
maintain an appropriate audit record; or
retain information that no longer identifies an individual.

Where we cannot delete all the information requested, we will explain what has been retained and the reason for retaining it.

12. Contact Details

Data-deletion requests and related questions should be sent to:

Karbon Creative Ltd
1–3 Silver Street
Bedford
MK40 1SY
United Kingdom

Email: info@karboncreative.co.uk
+44 7979 121720 | 0330 133 4116

For more information about how Karbon Creative collects, uses and potects personal data, please read our Privacy Policy.