Data Deletion Policy

Last updated: 1 June 2026

Effective date: 1 June 2026

Chapter One: General Provisions

1. Introduction

This Data Deletion Policy (the "Policy") governs the procedures and controls followed by Wthaiq ("the Platform", "we", "us") upon receipt of requests for the deletion of personal data, account data, documents or any other data processed through its services.

This Policy aims to explain the rights of Users, the mechanism for submitting deletion requests, and the cases in which a request may be refused or deferred, in a manner consistent with the applicable laws and regulations.

This Policy is to be read together with the Privacy Policy, the Data Retention Policy, the Terms and Conditions of Use and all other legal documents of Wthaiq.

2. Scope of application

This Policy applies to all data processed by Wthaiq, including:

• Personal data.
• Account data.
• Contracts and documents.
• Electronic signature data.
• Technical support records.
• Subscription and invoicing data.
• Platform usage data.
• Any other data processed by Wthaiq in its capacity as data controller or data processor, as the case may be.

3. Objectives of the Policy

This Policy aims to:

• Regulate the procedures for the deletion of data.
• Protect the rights of data subjects.
• Ensure compliance with laws and regulations.
• Strike a balance between the right to erasure and legal obligations.
• Clarify the cases in which certain data may be retained.

4. Relationship with the other policies

In the event of a conflict between this Policy and the Data Retention Policy or the Privacy Policy, the provision that is more specific to the matter in dispute shall apply, unless the law requires otherwise.

Chapter Two: Data Deletion Requests

5. Submitting a deletion request

The User may submit a request for the deletion of their data through the channels of communication or the official forms adopted by Wthaiq.

The request must include, where appropriate:

• The account identification details.
• The means of contact.
• A description of the data to be deleted.
• Any information that assists in processing the request.

6. Identity verification

Before giving effect to any deletion request, Wthaiq may take reasonable steps to verify the identity of the applicant, in order to protect the data from unauthorised deletion.

This may include requesting additional information or documents, or using electronic verification methods.

7. Requests submitted by a representative

Where a deletion request is submitted by an agent or a representative of the data subject, Wthaiq may request evidence of capacity, authorisation or legal guardianship before giving effect to the request.

8. Incomplete requests

Where a deletion request is incomplete or does not contain the information necessary to process it, the Platform may request that the details be completed, and processing of the request may be suspended until the required information is provided.

Chapter Three: Data Capable of Deletion

9. Account data

Account data may be deleted after verification of the request, having regard to legal obligations and to the Data Retention Policy.

10. Personal data

Personal data for which there is no longer any legal or operational need to retain may be deleted, in accordance with the applicable laws.

11. Documents

The User may delete documents or request their deletion where the service permits this, having regard to:

• The nature of the subscription.
• The account settings.
• The rights of other parties.
• The legal obligations relating to the documents.

12. Usage data

Certain usage data may be deleted or converted into anonymised data where there is no longer a legitimate need to retain it, in accordance with Wthaiq's policies and the legal requirements.

Chapter Four: Data That May Not Be Subject to Deletion

13. Data required to be retained by law

Wthaiq may refuse or defer a request to delete certain data where its retention is necessary for the purpose of:

• Compliance with laws and regulations.
• Giving effect to a judicial or regulatory order.
• Tax or accounting obligations.
• Anti-money laundering or anti-fraud requirements.
• Any other applicable legal obligation.

14. Data relating to disputes

Where the data is the subject of litigation, arbitration, an investigation or a legal claim, its deletion may be suspended until those proceedings are concluded or the reason for its retention ceases to exist.

15. Security records

Security records, login records, IP addresses and security event logs may be retained for the period necessary to protect the Platform, investigate security incidents, prevent misuse and comply with the law.

16. Financial records

Invoices, payment records, financial transactions and subscription records may be retained for the entire period required by tax, accounting or regulatory laws.

Chapter Five: Giving Effect to Deletion Requests

17. Review of the request

Wthaiq shall review the deletion request and verify:

• The identity of the applicant.
• The scope of the data to be deleted.
• The existence of any legal obligations preventing deletion.
• The effect of the deletion on the rights of third parties.
• Whether the request can be given effect from a technical standpoint.

18. Period for giving effect to the request

Wthaiq seeks to give effect to deletion requests within a reasonable period and in accordance with the periods imposed by the applicable law.

The period for giving effect may vary according to the nature of the data, the complexity of the request and the procedures necessary for verification.

19. Notification of the User

Upon completion of the processing of the request, the Platform may notify the User of the outcome of the request, whether acceptance, refusal or partial implementation, where this is appropriate or required by law.

20. Partial deletion

Where it is not possible to delete all of the data by reason of legal or contractual obligations, Wthaiq may carry out a partial deletion of the data that can be deleted, while retaining the data that the law or a legitimate interest requires to be retained.

Chapter Six: Data in Backups

21. Backups

Certain data may remain within backups after a deletion request has been given effect, by reason of the nature of backup systems.

Such data is not used operationally, and is deleted or overwritten automatically in accordance with the adopted backup cycles, unless the law requires it to be retained for a longer period.

22. Restoration of backups

Where a backup is restored for disaster recovery or business continuity purposes, Wthaiq shall, wherever possible, take appropriate steps to ensure that previous deletion requests are given effect after the restoration process is complete.

23. Technical limitations

There may be technical limitations that make the deletion of certain data from all copies or systems impossible on an immediate basis.

In such cases, Wthaiq shall take reasonable measures to prevent the use of that data until it is permanently deleted in accordance with the adopted technical cycles.

24. Anonymised data

A deletion request does not apply to data that has become anonymised in a manner that does not reasonably permit the identification of any person, so long as it is no longer possible to re-link it to the User.

Chapter Seven: Deletion of Data in Corporate Accounts

25. Deletion requests submitted by organisations

Where the account is owned by a company, an organisation or any legal person, the data deletion request must be submitted by the person authorised by law or by contract to administer the account, or by their legal representative.

Wthaiq may request evidence of authority before giving effect to the request.

26. Data of authorised users

The data of authorised users may be deleted at the request of the account owner or at the request of the data subjects themselves, according to the nature of the contractual relationship and the applicable law.

27. Shared data

Where the data to which the request relates is shared between more than one User or more than one party to a single transaction, Wthaiq may refuse its deletion or carry out a partial deletion if its deletion would affect the rights of others or the integrity of the electronic records.

Chapter Eight: Deletion of Electronic Signature Data

28. Signature records

It may not be possible to delete certain electronic signature records where their retention is necessary to establish the validity of transactions, to comply with the laws, or to protect legal rights.

29. Evidential data

The technical data associated with signature operations, such as timestamps, event logs, IP addresses and verification records, may be retained where this is necessary to establish the integrity of the electronic process or to perform legal obligations.

30. Signed documents

The deletion of signed documents may be subject to additional restrictions where those documents are the subject of a dispute, are required to be retained by law, or affect the rights of other parties to the transaction.

Chapter Nine: General Provisions

31. Amendment of the Policy

Wthaiq may amend the Data Deletion Policy at any time where legal, operational or security necessity so requires.

Amendments take effect from the date of their publication or from the date specified therein.

32. Severability

If any provision of this Policy becomes ineffective or unenforceable under the law, this shall not affect the validity or effectiveness of the remaining provisions.

33. Integration with the other policies

This Policy shall be construed together with the Privacy Policy, the Data Retention Policy, the Terms and Conditions of Use, the User Agreement and the remaining legal policies of Wthaiq, as an integrated legal system.

34. Communication

If the User has any enquiries or requests relating to the deletion of data, they may contact Wthaiq through the official channels of communication published on the website.

The Platform may request additional information to verify the identity of the applicant before giving effect to any request.

35. Entry into force

This Data Deletion Policy enters into force as of the date stated at its beginning and remains in effect until it is amended or replaced in accordance with its provisions.

36. Final acknowledgement

The User acknowledges that they have reviewed the Data Deletion Policy, that they understand the mechanism for submitting deletion requests and the cases in which a request may be refused or deferred, and agrees to the application of this Policy when using Wthaiq's services, to the extent permitted by law.

Governing Law and Jurisdiction

This document shall be governed by and construed in accordance with the laws of the Arab Republic of Egypt, and the competent Egyptian courts shall have jurisdiction to determine any dispute arising out of or in connection with it, and any arbitration — if agreed upon by the two parties — shall be conducted within the Arab Republic of Egypt and in accordance with its laws, without prejudice to any mandatory rights afforded to the User under the applicable laws of their country of residence.