Delete your account
How to delete a Castis account, and what happens to records the law requires us to keep.
This page is public on purpose
You do not need to sign in to read this page. Both Apple and Google require an account deletion route that is reachable without authentication, and data protection law requires that the route to exercise your rights is not hidden behind a login.
Which kind of account do you have?
A personal account — for example an eTiket account you created yourself. You control it and can delete it.
An organisation account — for example a Spatio Staff account created for you by an employer or venue operator. The organisation owns the record. You can still have your personal data deleted, but some employment records must be retained by your employer under labour and tax law. This is explained below.
Deleting a personal account
In the application. Open Account, then Delete account, and confirm. The account is deactivated immediately and deleted within thirty days.
By request. Write to partner@castis.io from the e-mail address on the account, with the subject “Account deletion”. We will verify your identity and confirm within thirty days.
What is deleted. Your profile, credentials, preferences, saved items, notification settings and device registrations.
What is retained, and why. Completed transaction and tax records, for the period required by tax and consumer protection law. Records subject to a legal hold or an ongoing dispute, until it ends. Security and fraud logs, for the retention period stated in the Privacy policy. Retained records are held in restricted storage, used only for those purposes, and deleted at the end of the period.
Deleting or leaving an organisation account
Castis is the processor for staff records; your employer is the controller. This means we cannot unilaterally erase a record your employer is required to keep.
What you can do directly. Remove your device binding, revoke sessions, delete the application, and withdraw any optional permission such as location. Write to partner@castis.io to have your personal contact details and any content that is personal rather than operational removed.
What your employer controls. Deactivating your membership, which ends all access immediately, and deciding the retention of attendance, shift, task and disciplinary records under the labour, tax and employment law that applies to it.
What we will do. On request we will pass your deletion request to your employer's administrator, confirm what has been removed, and tell you which categories are retained and on what legal basis. If your employer instructs deletion, we execute it and confirm.
Timing
Deactivation on confirmation. Deletion of active systems within thirty days. Removal from backup copies on the ordinary backup expiry cycle, within ninety days. Confirmation sent when the deletion completes.
If you are a hotel guest or a ticket holder
Guest requests, stay records and ticket records are held by the venue that served you, which is the controller. Contact the venue first. If you cannot reach them, write to partner@castis.io and we will identify the controller and pass your request on.
Questions
partner@castis.io. We respond within thirty days, or sooner where the law requires it.