# Erasure Confirmation Letter Template

**CONFIDENTIAL**

---

**From:** Meridian Analytics Ltd
Data Protection Office
47 Canary Wharf Tower, London E14 5AB
dpo@meridiananalytics.co.uk

**Date:** 14 March 2026

**To:** Emily Richardson
42 King's Road
Bristol BS1 4QT

**Reference:** ERA-2026-0212

**Subject:** Confirmation of Erasure of Your Personal Data

---

Dear Ms Richardson,

Thank you for your request received on 12 February 2026 to erase your personal data held by Meridian Analytics Ltd. We have assessed and processed your request in accordance with Article 17 of the UK General Data Protection Regulation (UK GDPR).

## 1. Assessment Outcome

We have confirmed that the ground for erasure under **Article 17(1)(b)** applies — you withdrew your consent for processing on 12 February 2026 and no other legal basis exists for the continued processing of the data categories listed below.

## 2. Data Erased

The following categories of personal data have been permanently erased from our systems:

| Category | Systems | Erasure Method | Completion Date |
|----------|---------|----------------|-----------------|
| Identity data (name, date of birth) | CRM (Salesforce), Data Warehouse | Permanent deletion | 28 February 2026 |
| Contact data (email, phone, address) | CRM (Salesforce), Marketing Platform (Mailchimp) | Permanent deletion | 28 February 2026 |
| Technical data (IP addresses, device IDs) | Analytics Platform, Application Logs | Permanent deletion + log purge | 03 March 2026 |
| Usage data (platform interaction history) | Data Warehouse, Analytics Platform | Permanent deletion | 28 February 2026 |

## 3. Data Retained Under Exception

The following data is retained under a legal exception:

| Category | Retention Basis | Exception | Retention Period |
|----------|----------------|-----------|-----------------|
| Financial records (invoices, payment records) | Companies Act 2006, s. 386; HMRC requirements | Art. 17(3)(b) — Legal obligation | 6 years from date of transaction (final deletion: August 2031) |

Access to retained financial records has been restricted to the Finance and Legal teams only.

## 4. Backup Systems

Data flagged for deletion in backup systems will be permanently removed at the next full backup rotation cycle. Expected completion: **12 May 2026** (90 days from the erasure execution date).

## 5. Third-Party Notifications (Article 19)

We have notified the following recipients of the erasure of your personal data:

| Recipient | Purpose | Notification Date | Confirmation Received |
|-----------|---------|-------------------|-----------------------|
| Stripe Payments Europe Ltd | Payment processing | 01 March 2026 | 05 March 2026 |
| Mailchimp (Intuit Inc) | Email marketing | 01 March 2026 | 04 March 2026 |
| Amazon Web Services EMEA SARL | Cloud hosting | 01 March 2026 | 07 March 2026 |

## 6. Suppression Record

To prevent inadvertent re-collection of your data, we have placed a suppression record containing only your email address hash (SHA-256) in our suppression list. This record contains no readable personal data and is used solely to ensure we do not process your data in the future.

## 7. Your Rights

If you are dissatisfied with our handling of your request, you have the right to:
- Lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk, telephone 0303 123 1113
- Seek a judicial remedy under Article 79 UK GDPR

Yours sincerely,

**Dr Sarah Chen**
Data Protection Officer
Meridian Analytics Ltd