Deleting your information

How to ask for your details to be removed, exactly what is cleared, and what is kept as the signed record.

[PLACEHOLDER — NOT LEGAL WORDING]

Parts of this page are a stand-in so the screen could be built and read against realistic text. They have no legal effect and must be replaced with BMW’s own wording before a real guest signs anything.

Still to be supplied by BMW:

The Information Officer's name and contact address — the route by which a request is actually made.
How long the signed indemnity is kept. BMW has not set a period, and this page will not invent one.

Anything on this page not marked as a stand-in is a plain description of what the system actually does, and is accurate as it stands.

How to ask

[PLACEHOLDER — NOT LEGAL WORDING] Requests go to the Information Officer at [INFORMATION OFFICER NAME AND CONTACT ADDRESS TO BE SUPPLIED].

A request is carried out by a named member of staff, who has to give a reason, and the action is written to an audit trail that records who did it and when.

What is cleared

Your identifying details are cleared from the record itself, in place, and the record is marked as deleted. They are not moved somewhere else and they are not archived.

Your name: Cleared.
Your mobile number: Cleared.
Your ID number: Cleared, including the last four digits shown to staff.
Your driving licence: The number, the code and the expiry date are all cleared. A licence number is treated as exactly as sensitive as an ID number.
Your date of birth: Cleared.

What is kept, and why

The signed indemnity itself is kept. It is the legal record, and it outlives your contact details — the lawful basis for keeping it is the establishment, exercise and defence of a legal claim, which is the entire reason the document was signed in the first place.

That basis covers the document and the evidence that it was signed. It does not cover your contact details, which is precisely why those go.

Your signature: Kept, as part of the signed document.
The wording you signed: Kept, word for word as it was shown to you. A copy of the text is stored on your signature at the moment you accept it, so that later changes to the wording can never alter what you actually agreed to.
The time you signed: Kept.
The network address and browser: Kept. They are evidence that the signature was made, and once your identifying details are gone they point at nobody.
The consents you gave: Kept, together with the exact wording of each one and the time it was granted — the proof of what was agreed.
The car's registration, model, year and passenger count: Kept. These describe a vehicle, not a person, and they are shared with everyone else who travelled in that car.

How long the record is kept

BMW has not yet set a period for which the signed indemnity is retained, and this page deliberately does not state one. A number here would be a commitment nobody has made.

When BMW sets that period, it will be named on this page.

One practical note: backups of the system are taken routinely, so a record cleared today also has to age out of the backups taken before it was cleared. Deletion is not instantaneous everywhere at once.

What deletion does not do

It does not remove the fact that a signature was made, or the document that was signed. Those are the record.

It does not touch anybody else. If you drove, the car you opened stays on the system with everyone else’s signatures in it intact — one person’s request must not take other people’s records with it. The car will simply show its driver as deleted.