Data Deletion Instructions

1. Hospitals and clinics: disconnect Meta Lead Ads

A SurgyCRM administrator can disconnect a Facebook Page at any time in SurgyCRM. Pages connected with "Connect with Facebook" can also be disconnected in Facebook by the person who connected them.

In SurgyCRM

1. Go to Settings → Integrations → Meta Lead Ads.
2. On the Page you want to stop, click Disconnect.

In Facebook

1. On Facebook, open Settings & privacy → Settings → Business integrations.
2. Find SurgyCRM and click Remove.

After disconnecting in SurgyCRM, it immediately stops receiving new leads from that Page and deletes the stored Page access token. Removing SurgyCRM in Facebook does the same for the Pages you connected with "Connect with Facebook". A Page your organisation connected with its own Meta app is disconnected in SurgyCRM, or in that app.

Leads already in your workspace stay there as part of your records until you delete them or ask us to.

2. Hospitals and clinics: request deletion of data

To delete Meta-sourced leads, or all data in your workspace, an administrator of your organisation can email info@surgyy.com with the subject "Data deletion request", including:

• your organisation's name as it appears in SurgyCRM;
• what should be deleted (for example: all leads received from Meta, specific leads, or the whole workspace);
• your name and role, so we can confirm the request comes from an authorised administrator.

We confirm receipt within 3 business days and complete the deletion within 30 days, except for anything we are legally required to keep. Deleted data is removed from backups on our normal backup cycle.

3. People who submitted a form to a hospital

If you filled in a Facebook or Instagram lead form for a hospital or clinic that uses SurgyCRM, that organisation controls your information. To access, correct or delete it:

1. Contact the hospital or clinic you submitted the form to. They can delete your record in SurgyCRM directly.
2. If you cannot reach them, email info@surgyy.com with the hospital's name and the phone number or email you used on the form. We will pass your request to that organisation and help them complete it.

We will not ask you for any medical information to process your request.

4. If you removed SurgyCRM from your Facebook account

When you remove SurgyCRM from your Facebook account, Meta notifies us automatically. We then:

• delete the access tokens SurgyCRM stored for the Facebook Pages you connected with "Connect with Facebook", and any unfinished sign-in;
• disconnect those Facebook Page connections, so no new data is received through them;
• give Meta a confirmation code you can use to check the status of the request.

Leads that a hospital had already received remain that hospital's records. To delete them, follow section 2 (hospitals) or section 3 (form submitters).

5. Check the status of a request

If you have a confirmation code from Meta, open the status link Meta showed you (it starts with surgycrm.surgyy.com/data-deletion/status), or email the code to info@surgyy.com and we will tell you the status of your request.

6. Grievances

If you are not satisfied with how a request was handled, contact our grievance officer, Mohammed Jamil Nasir, at nasir@surgyy.com or +91 76193 13365.

Contact