This page explains how users of Staffluma's website, SaaS workforce platform, and mobile applications can request deletion of a Staffluma account and associated personal data. It is publicly available without signing in, including for Google Play reviewers.
Aligned with Privacy Policy dated October 18, 2026 Google Play data deletion information No login required
Staffluma is a workforce management platform (HR, payroll preparation, attendance, leave, recruitment, and related people operations) offered via web and mobile applications. If you want Staffluma to delete your account or personal data associated with you, use one of the request channels on this page.
Important distinction. Many employee and payroll records in Staffluma are controlled by your employer (the customer organization), not by Staffluma acting alone. For workforce personnel files, your primary deletion request should go to your employer's HR or privacy team. Staffluma can assist employers with tools and processor instructions, as described in our Privacy Policy.
02. How to Request Deletion
You can request account or personal data deletion in any of the following ways:
Use the form on this page — complete the deletion request form below. No Staffluma login is required to submit the form.
Email Staffluma — write to [email protected] with the subject line “Account / Data Deletion Request” and include your full name, account email, company name, and whether you are an employee, company owner, or administrator. You may CC [email protected] when that address is formally activated (see Privacy Policy).
Workforce / employer-controlled data — if you are an employee, contractor, or applicant whose records are held for your employer, also submit your request to your employer's HR or privacy department. Staffluma processes that data as a processor on the employer's instructions.
03. Who Can Submit a Request
Employees & contractors
You may request deletion of Staffluma login credentials and personal data that Staffluma controls directly. For employment, payroll, and attendance records controlled by your employer, request deletion through your employer first.
Company owners & administrators
Authorized owners and admins may request deletion or closure of customer organization accounts and related administrative data, subject to contractual transition terms and legal retention duties that apply to the business.
Other account holders
Marketing site visitors, demo inquirees, and other individuals who interacted directly with Staffluma may request deletion of those direct interaction records via this page or support email.
Staffluma may decline or redirect a request when the requester is not authorized to dispose of company-owned business records, or when another controller (your employer) must instruct the deletion.
04. How Requests Are Verified
To prevent unauthorized deletion of someone else's account or data, Staffluma verifies requests before processing them. Verification typically includes:
Confirming control of the email address associated with the account or inquiry;
Matching the request to an existing Staffluma account, organization, or marketing record where one exists;
For company-owned or employer-controlled data, confirming that the requester is an authorized administrator or that the employer has instructed Staffluma to delete or anonymize the records; and
Applying a review period before irreversible deletion where operational safeguards require it (see retention section below).
Staffluma may ask for additional information if a request is incomplete or if authorization is unclear. We will not ask you to send passwords or copies of government ID images through this public form.
05. Account Deletion vs Personal Data Deletion
Account deletion
Means closing or disabling your Staffluma user account / login access so you can no longer sign in. Associated personal profile data that is no longer needed may then be deleted or anonymized, subject to verification and retention rules.
Deletion of specific personal data
Means requesting erasure of particular personal data categories without necessarily closing every related business record. Some records may still be retained when the law or the employer's controller instructions require it.
We do not promise deletion of every record. Payroll, tax, employment, audit, and other legally required business records may need to be retained even after an account is closed. See What May Be Retained.
06. What Personal Data May Be Deleted
Where Staffluma is the controller, or where a customer organization instructs Staffluma as processor and no legal hold or statutory duty applies, personal data that may be deleted or anonymized after verification can include, for example:
Staffluma login credentials and session tokens for the closed account;
Profile and contact details Staffluma holds for direct marketing, demo, or support interactions;
Mobile app account identifiers and related app-preference data that are not needed for legal or security retention; and
Other personal data for which erasure is legally justified and operationally feasible.
Exact categories depend on which Staffluma services you used and whether an employer remains the controller of the underlying workforce records. See the data categories described in our Privacy Policy.
07. What May Be Retained
The following retention statements are taken from Staffluma's published Privacy Policy (Section 14). We do not invent additional retention periods on this page.
7.1 Configurable operational retention
Audit logs: default retention of 365 days;
User login history: default retention of 365 days;
Export archives: automatically pruned after 90 days; and
Deletion request grace period: 30-day review period before processing.
7.2 Statutory employment & payroll records
Under Kenyan employment law and tax legislation (including the Employment Act, 2007 and Tax Procedures Act), employers are legally obligated to retain wage, payroll, tax deduction, and employment records for minimum statutory periods (typically 5 to 7 years). In Staffluma's capacity as a data processor, these records are maintained on behalf of customer organizations until instructed otherwise in accordance with their legal obligations.
7.3 Legal holds & account termination
Legal holds can suspend scheduled deletion during investigations or disputes. When customer account termination occurs, customer data is deleted or anonymized following the contractual transition period (the specific length of that transition period is set in the applicable customer agreement and is not restated as a fixed public number here).
7.4 Examples of records that may need retention
Payroll, wage, and tax deduction records required by law;
Employment contracts and statutory employment records;
Security, fraud-prevention, and audit logs within configured retention windows;
Records needed to establish, exercise, or defend legal claims; and
Aggregated or anonymized information that is no longer personal data.
08. Confirmation & Follow-Up
After a form submission is successfully accepted by Staffluma's request service, you will see an on-page confirmation that the request was submitted for review.
Staffluma will use the email address you provide to acknowledge and verify the request once it is logged for handling.
Processing is subject to the 30-day deletion-request review period described in the Privacy Policy, plus any additional time needed for employer authorization or statutory review.
If the online form cannot accept requests (for example, temporary service unavailability), email [email protected] instead. Do not assume a deletion has occurred unless Staffluma confirms it.
09. Deletion Request Form
Submit a verified deletion request below. Fields marked required are used for identity verification, routing (employee vs company owner vs admin), and abuse prevention.
10. Items Pending Policy Approval
To avoid inventing guarantees, the following items still require internal Staffluma policy or legal approval before they can be stated as binding public commitments:
Whether [email protected] is formally activated as a monitored inbox (currently referenced in the Privacy Policy as pending formal activation);
A fixed public SLA for acknowledgment and completion beyond the published 30-day deletion-request review period;
The exact contractual transition period length after customer account termination (agreement-specific);
Dedicated retention schedules for marketing/demo inquiries and mobile-app-only identifiers beyond the general Privacy Policy rules;
Publication of a physical mailing address or Data Protection Officer contact block (corporate registration details are maintained with counsel and are not published on this site); and
Production delivery wiring for this website form (webhook or database-backed API) — until configured in the deployment environment, unsuccessful submissions must fall back to email.