Data FAQs

We will only process personal data that is provided to us through:
– the API calls that you choose to integrate with the Carrier Management Platform; or
– the use of the user interface.
Generally, this consists of customer’s customer name, customer address, customer email and customer telephone number.

How long is the data retained before being deleted and how is the data purged?

Data is retained in:
– operational databases for 45 days after which it is automatically purged,
– the data warehouse for 13 months for client reporting purposes after which it is automatically anonymised.

Is the data pulled directly from the Customer’s database (i.e. if our customer places an order is the address pulled from our records)? For example, what steps may need to be taken with Sorted (if any) if our customer were to ask for their data to be updated – such as a change of address?

Every transaction is an individual transaction. We don’t host/store/cache your customer details, we take the individual’s contact details passed to us within each API call and pass them to the carrier. Any changes in your customer details are within your control.

Are Sorted able to remove data at an individual level if a data subject exercises their rights (e.g. to be forgotten). If so, how do you facilitate this?

Should a customer make a data subject access request or exercise their right to be forgotten then this would be logged with Sorted Customer Support. The data subject access request will result in us providing all relevant details. The right to be forgotten request results in either us deleting personal data from our databases or redacting personal data where record deletion is not practicable or possible.

Can the data be exported in a common format (in accordance with the portability right)?

Yes.

Will the data be held in an anonymised or pseudonymised form?

Within the construct of the platform (i.e. operational databases), no it is not as doing so would be contrary to the service. Within the Management Information/Business Intelligence systems personal data is anonymised.

Is the data subject to any automated decision making?

No.