UK GDPR Compliance & Data Rights
Detailed overview of your statutory rights, data controller responsibilities, and Right to Erasure procedures.
1. Data Controller vs. Data Processor
For tradesmen using Pantom SaaS: Pantom acts as a Data Processor regarding end-customer lead information submitted through your hosted website. The tradesman acts as the Data Controller responsible for customer relationship management once leads are routed to WhatsApp.
2. Right to Erasure ("Right to be Forgotten")
Under Article 17 UK GDPR, both trade clients and end-customers have the right to request immediate deletion of their personal records from our routing databases. To submit a deletion request, email [email protected] with your name and WhatsApp contact number. All associated records will be purged within 48 business hours.
3. Data Security & Infrastructure
All Pantom servers, databases, and webhook execution nodes operate in secure UK/EU data centers with end-to-end TLS 1.3 encryption, automated daily data backups, and strict RBAC access controls.