PSA: HelloFresh doesn't delete data when asked, only changes the email address

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by closeparen on Thursday May 26, 2022 @02:17PM (#31521688)

I think it's pretty rare that a business is going to erase all record that a transaction ever occurred, particularly a transaction involving other people (merchants, gig workers). Rather they are going to erase your association with the transaction, by rewriting your account as a "tombstone" account with fake details. That's a pretty normal approach.

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by oliwarner on Thursday May 26, 2022 @07:11PM (#31524405)

You have to show a pretty strong need to keep PII after a user has expressly withdrawn their permission for you to carry on processing it.

No, it's not uncommon to "tombstone" data, but when you do that, you should remove data you have no rights to any more. Order numbers, accounting, payments that sort of stuff is all fair game (for limited time), but the point here is it appears they're not deleting anything, they're just moving it to be inaccessible to the user.

They keep the data. And that's a) scummy and b) illegal in several jurisdictions.

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by otterley on Thursday May 26, 2022 @09:13PM (#31525118)

If the records no longer contain PII, then they've arguably satisfied their duties under the law, haven't they? Has a court held otherwise?

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by oliwarner on Friday May 27, 2022 @02:01AM (#31526458)

But the records do.

> Your account showing your name, address, credit card, etc can still be accessed whilst the token stored in the cookie is still valid

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by zbuf on Friday May 27, 2022 @09:19AM (#31529269)

They're also given time for the deletion to be fully complete -- backups etc.. That could apply here.

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by edmundsauto on Friday May 27, 2022 @01:24AM (#31526255)

I think replacing the userid with an ID that isn’t reversible but keeps all the foreign key constraints is acceptable.

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by zxienin on Thursday May 26, 2022 @03:41PM (#31522541)

Correct for transaction data. Such data is owned by hello fresh and they need to keep it (for financial reporting, for instance).

However OP talked of master data. That should be removed when user asks to delete their account.

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by Traster on Thursday May 26, 2022 @03:37PM (#31522489)

If it really keeps credit card details, that’s way more than just a tombstone.

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by fshbbdssbbgdd on Thursday May 26, 2022 @03:52PM (#31522641)

(Asking out of ignorance, I don’t know how this works)

Suppose HelloFresh found out they should give you a refund after you deleted your account. Would they need the credit card to do that?

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by Traster on Thursday May 26, 2022 @06:12PM (#31523947)

In your scenario are you suggesting that HelloFresh start sending people refunds unprompted? That doesn't exactly sound likely, but sure, they could stick a "Disclaimer: If you delete your details it may make it more difficult for us to refund you if we suddenly lose our minds and start inexplicably sending refunds to people unprompted".

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by fshbbdssbbgdd on Friday May 27, 2022 @01:38AM (#31526337)

In general, it’s not that strange to sell something then realize you can’t actually deliver it and make a refund. I guess HelloFresh is a little bit different from the average e-commerce business because they sell perishable food. But probably there’s some case where they would take some money then later decide to give it back.

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by marcofatica on Thursday May 26, 2022 @04:15PM (#31522872)

They could mail a check.. oops now they need your mailing address

Or they could call you and ask.. oops now they need your phone number

etc

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by aPoCoMiLogin on Friday May 27, 2022 @08:29AM (#31528779)

you only need the transaction details to call your payment gateway to do the refund, unless you are the payment gateway.

[ Parent | on HN ]

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by rrobukef on Friday May 27, 2022 @01:11AM (#31526200)

Encrypted archival of PII for a limited time, say a year. GDPR allows the storage for legal reasons.

A one way hash of PII, salted, stretched, this is enough to verify identity but also doesn't keep the PII directly (I know only 8 billion people on earth is not enough entropy. Still you make a legal effort and segregate it from your network)

[ Parent | on HN ]