Data Deletion Instructions

Before you submit a request

ReReply stores information for separate clinics, pharmacies, wellness providers and other Customer Organisations. If your request concerns a conversation, appointment or CRM record, contact the organisation you interacted with first because it normally controls and can identify that record.

You may also request deletion directly from Medtech Healthcare Sdn Bhd, the provider of ReReply. ReReply will route a verified request to the appropriate Customer Organisation or act on its lawful instructions. Never send a password, WhatsApp verification code, two-step verification PIN or full medical history.

How to request deletion

Email [email protected] with the subject 'ReReply Data Deletion Request'. ReReply aims to acknowledge requests within seven calendar days and will confirm completion, explain lawful retention, or identify the Customer Organisation that must decide the request.

• Include your name, the email address or telephone number used with the service, and the clinic, pharmacy, wellness provider or other organisation involved.
• State whether you want an account, conversation, contact record, attachment or all eligible ReReply-held data deleted, without adding unnecessary clinical details.
• Complete limited identity, authority and relationship checks if requested. ReReply will not ask for your password or SMS verification code.

What deletion covers

• Eligible ReReply user profile and authentication data.
• Eligible contact, CRM, appointment, note, attachment and conversation records controlled by the relevant Customer Organisation.
• Optional automation or AI inputs stored in ReReply-controlled systems, where applicable.
• Connected-channel credentials controlled by ReReply when an authorised organisation closes an integration, including an encrypted Google OAuth credential for a disconnected Gmail or Search Console connection.

Information that may be retained

ReReply or the relevant Customer Organisation may retain limited information needed for legal or professional recordkeeping, fraud and security investigations, financial records, dispute resolution, opt-out enforcement or proof that a deletion request was completed.

Data removed from active systems may remain temporarily in encrypted or access-restricted backups until normal rotation completes. Backup data is not returned to active use except for disaster recovery and remains subject to the original deletion controls.

Google, WhatsApp, Meta and other third parties

A ReReply deletion request removes eligible data controlled by ReReply or the relevant Customer Organisation. It does not delete a Google, Gmail, WhatsApp or Facebook account or information independently held by those providers. Use each provider's privacy controls for information it controls.

For questions or an unresolved request, reply to the confirmation email, contact the relevant Customer Organisation, or email [email protected].