Give data requests a clear route through your organisation.
Keep requests for access, correction and deletion visible to the people responsible for handling them.
Members can raise data-rights requests and authorised handlers can review them with due dates and history. Retention rules and protected financial records limit what a deletion can remove.
The details that keep work moving
Requests from members
A member asks for a copy, a correction or a deletion from their own page. The handler gets a work list with a due date, 30 days by default, and a reminder five days before it falls due.
A copy of their data
The copy is prepared in the background as a JSON file and a PDF, and the link expires after seven days. The JSON file is complete. Text in other scripts may not print correctly in the PDF.
Corrections with a second person
A member can ask to correct their name, date of birth, gender, email, area and address parts. Another handler approves the change. Phone and ID numbers are not changed this way.
Deletion by anonymising
Deletion anonymises the member in every record that holds their details, including dependants, nominees, documents, payer names on receipts, ledger wording, messages and the login if the person belongs to no other organisation. Amounts, dates and numbers stay. Another handler approves first.
Erase records without a member
Search for and erase records that have no member behind them, such as sponsors, non-member donors, walk-in payers, guests, pledges and import rows.
Retention you control
A background job removes what is left once the retention period you set has passed. The default for financial records is ten years.
Clear about the limits
Some records are kept on purpose: the audit history, notes typed on posted money records, beneficiary records, which have their own action, and claim documents until the retention period ends.
Export all your data
Download your whole organisation as a zip with one CSV for each table, JSON files, and your uploaded files with a SHA-256 manifest. It is prepared in the background, the link expires and every export is audited. Very large files may be left out.
Time-limited support access
Let TRELVERIQ Governance support look at your data only when you allow it, for 1 to 168 hours, with a reason, read-only by default and optionally for one named person. Every support request is logged. Money, approvals and exports are never open to support.
Make it work your way
Choose the rules your organisation needs. Committee permissions and inherited controls still apply.
- How many days you have to answer a data request.
- How many years financial records are kept before they are purged.
- The version of your consent wording.
- The consent wording itself.
- How many months of message history are kept.
- Whether program photos need consent.
- How many days a raffle guest’s phone number is kept.
- Whether beneficiary export is switched on.
Bring this workflow into your organisation.
Review your requirements with TRELVERIQ, choose the right modules and prepare your team for a considered rollout.