Data Deletion Instructions

1. Send an email to [email protected] with the subject line "Privacy request".
2. Tell us how to find your information: the email address or phone number you used with us or that we used to contact you, your business name if we dealt with you as a business, and, for a Facebook, Instagram, or Google account you connected to our tools, the name of the Page, account, or channel.
3. Tell us what to delete: everything we hold about you, or only part of it, such as your newsletter sign-up. If you do not say, we treat the request as a request to delete everything.

Before we delete anything, we confirm that the request comes from you, usually by replying to the email address we have on file. We may ask one or two follow-up questions. We do not ask for government ID for routine requests.

A request that reaches us through a platform's own data deletion tool, such as a deletion request that Facebook sends us for you, counts as verified when we receive it.

A request only to stop email and calls needs no verification. Section 7.4 of our Privacy Policy explains how to make one.

• Within 7 days after we verify a request about an account on another platform, described in section 6, we remove our access to the account, delete what our tools copied from it, and email you to confirm.
• Within 10 business days of receiving a request about anything else, we confirm that we received it and ask any verification questions.
• Within 45 days of receiving that request, we complete the deletion and email you a final confirmation. If we need more time, we tell you why and how long it will take.

When you ask us to delete everything, we delete or anonymize:

• Your messages and requests: contact form messages, website outline requests, call bookings, and emails.
• Newsletter sign-ups, free download requests, and requests made on our Tools page.
• Questionnaire answers, project correspondence, including reports we sent you, and files for your website or for specialty work.
• CMO Academy records, including your progress, assignments, discussion posts, and instructor feedback, and Library book suggestions.
• The outreach record we keep about a business we contacted, as described in our Notice for Businesses We Contact.
• Information our tools copied from an online account you authorized us to work in, and the access tokens our tools hold for that account.

Some information is needed to keep providing a service you have with us, such as your website files while your website is live. If your request covers it, we tell you what the deletion would affect before we go ahead.

Some records have to be kept even after a deletion request. We keep them under restricted access and use them only for the reason they are kept.

• Orders, billing records, signed agreements, and records of your acceptance of the Managed Website Service Agreement, including consent to automatic renewal: 7 years after your service or engagement ends, to meet tax and accounting rules and to keep proof of what you agreed to. For a one-time purchase, such as a digital product, 7 years after the purchase.
• A do-not-contact entry, if you also asked us to stop contacting you, so that your request keeps working. It holds only the email address, web domain, or phone number we must not contact, the reason, the date, and how the request reached us.
• Server and security logs, for up to 30 days where we can set the period. Logs kept by Cloudflare, our hosting provider, follow Cloudflare's privacy policy.
• Records under a legal hold, such as a subpoena or a pending lawsuit, until the hold ends.

Stripe keeps its own records of your payments under its own privacy policy.

If you connected a Facebook, Instagram, Google, or other account to our tools, or added us as a user of one, you can remove our access at any time:

• Facebook and Instagram. Our Meta app is called Waterfront Social Publisher. In Facebook, open Settings & privacy, then Settings, then Business integrations, and remove Waterfront Social Publisher. This also removes its access to an Instagram professional account linked to your Facebook Page. If you find the app under Apps and websites instead, remove it there.
• Google. Remove our access on Google's security settings page. If you added us as a user or manager of a Google Business Profile, a Google Search Console property, a Google Ads account, or a YouTube channel, also remove us in that product's user or access settings.
• Other platforms, such as a CRM: remove our user in the platform's account settings, or ask us to remove it.

If you ask us to remove our access or to delete what our tools copied from the account, by email or through the platform's own data deletion tool, we do both within 7 days after we verify your request, as section 2 describes. When our access ends in any other way, such as when you remove it in the platform's own settings, we delete that information, including access tokens, within 30 days. Reports we already sent you stay with our project correspondence for the period in our Privacy Policy, unless you ask us to delete them.

We cannot delete information that stays on a platform itself, such as posts already published on your Facebook Page. To remove it, use the platform's own tools, or ask us in writing to remove content we published for you while we still have access.

When the deletion is complete, we email you to confirm what we deleted, what we kept, and why we kept it.

Questions about this process go to:

S & CC Group Inc
30650 Rancho California Rd, Suite D406 #375
Temecula, CA 92591
Email: [email protected]