What is the best way to handle a customer who asks to delete their signed waiver data?

Why this request is different from a normal opt-out

A marketing unsubscribe is simple: honor it immediately and move on. A request to delete a signed waiver is a different animal, because that waiver is your evidence that the person accepted the risks of an activity, and you may need that evidence for years. Claim windows run long, and for participants who were minors they often do not even start until adulthood. Deleting the record on request would leave you exposed for exactly the period the document was meant to cover. Related: What is the easiest way for a tour operator to collect signed waivers from a whole group at once?

Consumer privacy laws in a growing number of states, California's being the best known, give individuals a right to request deletion of their personal data. Those same laws generally include exceptions for records a business needs to comply with a legal obligation, to complete the transaction the data was collected for, or to establish or defend legal claims. Whether a particular law applies to your business at all often depends on size and revenue thresholds that many small studios fall below. It is still wise to behave as if the norms apply, and to have counsel confirm which rules actually reach you. Related: How can an event organizer speed up check-in when every attendee still needs to sign a waiver?

Keep reading: How can an event organizer speed up check-in when every attendee still needs to sign a waiver?, How does a gym quickly find a specific signed waiver months after a member first signed it?, What is the easiest way for a tour operator to collect signed waivers from a whole group at once?. See how WaiverFlowr helps you digital liability waiver signing and storage.

Separate the data you need from the data you do not

The core waiver record is the signer's name, the signature, the date, the document version, the audit trail, and the emergency contact and medical notes that relate to the activity. That is what you retain. Around it there is usually a halo of data you can delete without hesitation: marketing preferences, a photo or video consent that can be withdrawn going forward, duplicate records from repeat visits, a customer profile with birthday reminders and preferences, and stale medical details once the retention period for that record has passed.

This is much easier when the system separates the waiver record from the marketing profile in the first place, so a deletion can remove one without touching the other. It is also a strong argument for collecting less up front. Every field you add to the waiver becomes a field you have to defend keeping when someone asks you to delete it. If a piece of information does not help you run the activity safely or defend a claim, it probably does not belong on the waiver at all.

How to respond, step by step

First verify that the request is actually from the person whose data it concerns, for example by asking them to reply from the email address on file or to confirm details that match the record. Acknowledge the request promptly and log the date it arrived. Then respond in writing, plainly: here is what we will delete, here is what we will retain, here is how long we will retain it, and here is why, referencing your written retention policy. Offer them a copy of the waiver they signed. Do not argue and do not go silent; both make a routine request into a complaint. Related: How does a gym quickly find a specific signed waiver months after a member first signed it?

Then do exactly what you said. Delete the marketing and profile data, add a do-not-contact flag, move the retained waiver into restricted access so only a manager can open it, and add a note to the record that a deletion request was received and partially honored on that date. That note prevents someone on your team from innocently rebuilding the profile a year later. Keep the request and your response together in a small log; if a regulator or the customer ever asks, you can show a considered process rather than an improvised one. Related: Is a digital waiver really better than the trusty paper clipboard a small studio has always used?

Policies to have in place before the first request comes

Write a retention schedule for waivers based on the claim window for your state and activity, with a longer period for minors, and stick to it, including the scheduled purge at the end. Update your privacy notice to say plainly that signed waivers are retained for legal reasons for a stated period even after a deletion request. Document the deletion request procedure so that whoever reads the inbox knows what to do. Restrict access to retained records that are no longer active.

Ask your waiver vendor three questions: can you delete selectively, removing profile data while retaining the signed record; can you restrict access to a single record; and can you provide confirmation of what was deleted and when. Any serious platform should answer yes to all three. A closing caution: this article describes a sensible approach, not legal advice, and state laws differ and keep changing. A short conversation with counsel about which privacy laws apply to a business of your size, in your state, is the right first step.