Data requests

Who this covers

The contact at a vendor: the address a purchase order is emailed to, which is often a named person's. Requesters and approvers are your own users. The vendor itself is a business, and its name on requests and purchase orders is your procurement record.

1 · Subject access — export everything held

Vendor contact Acme Industrial — quotes@acme-industrial.example Dell Technologies — sales@dell.example Globex Supplies — accounts@globex.example Northwind Logistics — hello@northwind-logistics.example Office Depot — orders@officedepot.example

Download their data (JSON)

2 · Erasure — remove a contact's address

The address is replaced with [removed] on the vendor, in the purchase-order send log, and inside the request-history lines that say where a PO was emailed.

The vendor, its requests and its purchase orders stay. Who asked, who approved, what it cost and when are the approval record. Approva refuses while a request for the vendor still awaits its decision or its purchase order, because that PO would be emailed to this address.

Kept: the audit trail's copy of each line saying a purchase order was emailed to this address, because the audit trail cannot be edited.

Vendor contact Acme Industrial — quotes@acme-industrial.example Dell Technologies — sales@dell.example Globex Supplies — accounts@globex.example Northwind Logistics — hello@northwind-logistics.example Office Depot — orders@officedepot.example

Erase the address