World Delete +1 (918) 309-2025
🇪🇸 Español🇬🇧 English🇷🇺 Русский🇺🇦 Українська🇫🇷 Français🇮🇹 Italiano🇦🇪 العربية
Legal

Privacy Policy

PRIVACY POLICY - WORLD DELETE

Last updated: September 17, 2026
Owner: World Delete LLC
FEI/EIN: 30-1251788
Registered address: 4300 Biscayne Blvd, Suite 203, Miami, FL 33137, USA
Official website: https://world-delete.com
Contact email: [email protected]

1. Introduction

This Privacy Policy describes how World Delete LLC (hereinafter, “World Delete”, “we” or “the company”) collects, uses, stores and protects the personal data of its clients, users and visitors to its website and digital platforms.

World Delete acts as the data controller of the personal data processed through its services, in compliance with:

  • The General Data Protection Regulation (EU) 2016/679 (GDPR).
  • The Florida Digital Privacy Act (FDPA).
  • The California Consumer Privacy Act (CCPA).
  • And international best practices regarding privacy and information security.

2. Data we collect

World Delete collects the following types of personal data, depending on the type of relationship with the user:

a) Identification and contact data

First name, last name, address, country, email address, telephone number and identity document.

b) Contractual and billing data

Data required for the issuance of invoices, payment receipts, transaction history, bank accounts and currency used.

c) Technical and website usage data

IP addresses, device identifiers, cookies, access logs and browsing behavior on World Delete's platforms.

If you accept cookies, the general pages of the website load the LinkedIn Insight Tag, which discloses to LinkedIn the page visited and a browser identifier in order to measure and target our campaigns; it is not loaded on pages with forms or on removal request pages. Likewise, only if you accept cookies, your browser loads the Meta and Reddit pixels, which disclose to these platforms the page visited, a browser identifier and, where applicable, the submission of a form or a WhatsApp click, for the same purpose. We ask all visitors for this consent before enabling any analytics or advertising cookies, whatever their country; the choice is valid for 6 months and you are asked again if the technologies used change. You can change it at any time from “Cookie settings” in the footer, and find the details in the Cookie Policy.

In addition, if you arrive from a Google ad, the Google tag may add a _gl parameter (and, where applicable, gclid) to the internal links you click, visible in the address bar. It is not a cookie and it is not stored on your device: it contains a technical identifier of the ad click and a timestamp, encoded by Google and without data that directly identifies you, and it only serves to keep that click associated with your visit while you browse, so that your request is attributed to the right campaign if you accept cookies. If you reject them, it does not become a cookie and is not retained. It is explained in detail in the Cookie Policy.

d) KYC/AML verification data

Facial images, scanned identity documents and authenticity validation results, in compliance with anti-money laundering and counter-terrorism financing regulations.

e) Reputation and public content data

Within the framework of the removal or reputation management services, the links, URLs, articles or public posts that the client themselves requests to be removed or reviewed are collected.

3. Purposes of processing

Personal data is processed for the following legitimate purposes:

  • Contractual performance: to provide the services contracted by the client.
  • Legal compliance: to verify identity, prevent fraud and meet AML/KYC obligations.
  • Care and support: to respond to inquiries, requests or incidents.
  • Administrative and accounting management: to issue invoices, charges and receipts.
  • Security and maintenance: to ensure the technical and operational integrity of the platforms.
  • Commercial communication (optional): sending updates or news only with prior consent.
  • Advertising measurement (optional): to measure the effectiveness of our advertising campaigns and optimise them, only if you tick the specific, optional checkbox on the form (see section 5 f).
  • Advertising audiences: to exclude our clients from ads aimed at attracting new clients and to create similar audiences on advertising platforms, with the authorisation the client grants in their contract (see section 5 g).
  • Progress of requests: to inform the advertising platform of origin of the progress of requests received from its ads, in order to measure which campaigns attract useful requests (see section 5 h).

World Delete does not sell, rent or trade its clients' personal data.

4. Legal basis for processing

The processing of personal data is based on one or more of the following legal grounds:

  • Performance of a contract: provision of the requested services.
  • Compliance with legal obligations: especially regarding anti-money laundering (AML) and security.
  • Explicit consent: for specific processing (for example, the use of biometrics, commercial communications, advertising measurement through the optional checkbox on the form or client lists for advertising under the contract).
  • Legitimate interest: for the continuous improvement of services and the security of systems, and to inform Google, Meta and LinkedIn of the progress of requests received from their ads or forms (section 5 h).

5. Transfer of and access by third parties

World Delete does not share personal data with third parties, except in the following cases:

a) Technology and hosting providers

Both providers offer infrastructure under European data protection standards and apply advanced security and availability measures.

b) KYC / AML verification provider

c) Artificial intelligence and reputation analysis services

World Delete uses artificial intelligence (AI) tools for the sole purpose of analyzing and classifying public information available in digital media, search engines, social networks and other open sources.
These tools are used to identify negative, potentially defamatory or harmful mentions about clients, and to assess the reputational impact of such mentions.

The automated processing is carried out using the AI infrastructure and models of Microsoft Corporation, through its Microsoft for Startups Founders Hub platform.

Microsoft Corporation
One Microsoft Way, Redmond, WA 98052, United States
Website: https://www.microsoft.com
Privacy policy: https://privacy.microsoft.com
GDPR compliance statement: https://learn.microsoft.com/compliance/regulatory/gdpr

The use of AI is strictly limited to the processing of public sources and does not involve automated decision-making that produces legal or significant effects for the client.
All results are reviewed by human analysts at World Delete before any action or report.

d) External auditors, advisors or consultants

Only within the framework of ISO 27001, 9001 audits or specific legal requirements, under confidentiality and data processing agreements (DPA).

e) Competent authorities

When so required by law, judicial proceedings or a regulatory authority with legal jurisdiction.

f) Advertising and measurement platforms

When you contact us through an advertisement, we disclose to the advertising platform from which you reached us (Meta Platforms Ireland Ltd., Reddit Inc., Google Ireland Ltd. and LinkedIn Ireland Unlimited Company) the click identifier together with your email address and telephone number, pseudonymised by means of a hash function (SHA-256), for the sole purpose of measuring the effectiveness of our advertising campaigns and optimising them.
Legal basis: your consent, which you give by ticking the specific, optional advertising measurement checkbox on the form. If you do not tick it, we do not share this data with any platform for this purpose. The processing operations described in sections 5 g) and 5 h) have their own legal basis, stated in each of them. You may withdraw your consent or object at any time, without affecting the lawfulness of processing based on consent before its withdrawal, by writing to [email protected] or to our Data Protection Officer (DPO) at [email protected].

g) Client lists for advertising (custom audiences)

If you are a World Delete client, we may disclose to Meta Platforms Ireland Ltd. (Custom Audiences) and to Google Ireland Ltd. (Customer Match) your email address, telephone number, first name and surname, country, city and postcode, pseudonymised before transmission by means of a hash function (SHA-256), except for the country and postcode, which Google requires to receive unencoded in order to match the address. The platforms only use them to recognise whether you have an account with them; they receive no information about the service you contracted. The purpose is not to show you ads aimed at attracting new clients and to create audiences of people with similar characteristics, which do not include your data.
Legal basis: your consent, given in the service agreement. You may withdraw it at any time, without affecting the lawfulness of prior processing, by writing to [email protected] or to the DPO at [email protected]; we will stop including your data and request its deletion from these lists. Google keeps list membership for a maximum of 540 days.

h) Progress of your request (conversions from our management system)

To measure which campaigns attract useful requests, we inform the advertising platform of origin of the progress of your request (request received, qualified request, quote sent or contract signed):

  • to Google Ireland Ltd., where you reached us from a Google ad, together with the ad click identifier (gclid);
  • to Meta Platforms Ireland Ltd., where you contacted us through a Facebook or Instagram form, together with the identifier Meta assigns to that form submission (lead_id), without your email address or telephone number;
  • to LinkedIn Ireland Unlimited Company, where you contacted us through a LinkedIn form or reached us from a LinkedIn ad, together with the identifier LinkedIn assigns to that form submission (leadFormResponse) or to the ad click (li_fat_id) and your email address pseudonymised with a hash function (SHA-256), without your email in clear text or your telephone number.

Neither the content of your request nor the service contracted is disclosed.
Legal basis: our legitimate interest in measuring and improving the effectiveness of our campaigns. The platform already knows the click or form through which you reached us and only receives that identifier, the stage and, in the case of LinkedIn, the pseudonymised email. You may object to this processing at any time by writing to [email protected] or to the DPO at [email protected], and we will stop sending this data.

6. International transfers

Data is stored primarily on servers located in the European Union.
However, some processing may involve transfer to the United States. That transfer relies on the EU-U.S. Data Privacy Framework where the provider participates in it and, in all other cases, on the Standard Contractual Clauses (SCC) approved by the European Commission, ensuring an adequate level of protection.

In particular, the data disclosed to the advertising platforms listed in sections 5 f), 5 g) and 5 h) may be transferred to the United States. According to the official list of the U.S. Department of Commerce (www.dataprivacyframework.gov), consulted on September 16, 2026, the following hold an active certification under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on July 10, 2023: Google LLC, LinkedIn Corporation and Reddit, Inc., with the status “Active”, and Meta Platforms, Inc., with the status “Active - Re-certification under Review”, meaning that it remains on the list as an active participant while the Department of Commerce reviews its annual re-certification; Meta Platforms, Inc. is not certified under the UK Extension. The infrastructure and analysis providers Amazon.com, Inc. (“Active”), whose certification expressly includes Amazon Web Services, Inc. among its covered entities, Cloudflare, Inc. and Microsoft Corporation also hold an active certification, the last two with the status “Active - Re-certification under Review”. The hosting contract is entered into with Amazon Web Services EMEA SARL (Luxembourg). To the extent that any transfer is not covered by that certification, it will be based on the Standard Contractual Clauses approved by the European Commission.

7. Retention periods

Personal data will be retained for the duration of the contract and thereafter for the periods necessary to comply with legal obligations or audits.

  • Contractual and billing data: up to 6 years (in accordance with tax legislation).
  • KYC/AML data: for the duration of the contractual relationship.
  • Technical data or logs: maximum 12 months.

Once these periods have elapsed, the data is securely deleted or anonymized.

8. Users' rights

The data subject may exercise at any time the rights of:

  • Access: to know what data World Delete holds.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure: to request the deletion of their data.
  • Restriction: to temporarily restrict processing.
  • Portability: to receive the data in a structured format.
  • Objection: to object to processing based on legitimate interest.

To exercise these rights, you may send an email to [email protected] attaching a document proving your identity.

You may also contact the Data Protection Officer (DPO):
[email protected] - Seven Degrees Global Partners SL, Barcelona, Spain.

9. Information security

World Delete applies administrative, technical and organizational security measures in accordance with the ISO 27001:2022 and ISO 9001:2015 standards, including:

  • Encryption of data in transit and at rest.
  • Access control and activity logging.
  • Backups in secure environments.
  • Periodic vulnerability assessments.

In the event of a security incident affecting personal data, the data subject and, where applicable, the competent authorities will be notified within a maximum period of 72 hours.

10. Minors

As a general rule, World Delete's services are not directed at minors under 18 years of age.

However, World Delete may act on behalf of a minor when there is express and verifiable authorization from their parents, guardians or legal representatives, especially in cases related to:

  • Unauthorized dissemination of the minor's images, videos or personal data.
  • Situations of digital harassment or improper public exposure.

In such cases, World Delete may request documentation proving guardianship or legal representation before initiating any action.

If a minor has provided personal data without proper consent, guardians or representatives may request its immediate deletion by writing to [email protected].

11. Updates to this policy

World Delete may amend this Privacy Policy to reflect legal, technical or service-related changes. Any amendment will be published on this page, with the date of the latest update indicated at the top of the document. The current version will always be available at https://world-delete.com/en/privacy-policy.html.

Where an amendment affects processing based on your consent, we will ask for your consent again before applying the change to that processing. We will also inform you of any material changes by appropriate means, such as a prominent notice on the website or an email where we hold your contact details.

12. Contact and complaints

For privacy inquiries or complaints, you may contact:

World Delete LLC - Legal Department
[email protected]

Data Protection Officer (Europe)
[email protected] - Seven Degrees Global Partners SL, Barcelona, Spain

KYC/AML verification provider
[email protected] - MARKETS PROLIVE 360, S.L., Barcelona, Spain

You may also lodge a complaint with the relevant supervisory authority: