Account Management

Last Updated: 2026-01-06 GDPR Compliance: Article 17 (Right to Erasure), Article 20 (Data Portability)

Overview

DigiWedge provides self-service account management features that allow you to control your data, including the ability to export your data and delete your account.

Data Export

You can export all data associated with your account at any time.

How to Export Your Data

1. Go to Settings > Account > Privacy
2. Click Export My Data
3. Select format:
   • JSON - Machine-readable format, best for developers
   • CSV - Spreadsheet format, best for viewing in Excel
4. Click Download

What's Included

Your export contains:

Category	Data Included
Profile	Name, email, phone, profile photo
Bookings	All tee time reservations (past and future)
Payments	Transaction history, receipts
Memberships	Club memberships, benefits used
Preferences	Notification settings, favorites
Activity	Login history, device information

Export Format

JSON Format:

{
  "exportedAt": "2026-01-06T10:00:00Z",
  "user": {
    "email": "john@example.com",
    "firstName": "John",
    "lastName": "Smith"
  },
  "bookings": [...],
  "payments": [...],
  "memberships": [...]
}

CSV Format:

• Multiple CSV files in a ZIP archive
• One file per data category
• Headers in first row

Account Deletion

You can permanently delete your account and all associated data.

Before You Delete

Consider these points before deleting your account:

• Active Bookings: Cancel any upcoming tee times first
• Outstanding Balance: Pay any unpaid invoices
• Memberships: Your club memberships will be terminated
• Data Loss: Deletion is permanent after the grace period

How to Delete Your Account

1. Go to Settings > Account > Privacy
2. Click Delete My Account
3. Review the information shown:
   • Active bookings (must be cancelled first)
   • Outstanding balance (must be paid first)
   • Grace period details
4. Enter the 6-digit OTP sent to your email
5. Click Confirm Deletion

Grace Period

After requesting deletion:

• Your account enters a 30-day grace period
• During this time, you cannot log in
• You can restore your account within this period
• After 30 days, deletion is permanent and irreversible

What Gets Deleted

Immediately	After Grace Period
Login access disabled	Profile data
Future bookings cancelled	Booking history
Notifications stopped	Payment records
	Membership records
	All personal data

What's Preserved (Anonymized)

For legal and accounting purposes, some records are anonymized rather than deleted:

• Completed transactions (amount, date - no personal details)
• Audit logs (action type, timestamp - no personal details)

Account Restoration

If you change your mind during the grace period, you can restore your account.

How to Restore Your Account

1. Go to the login page
2. Enter your email address
3. Click Forgot Password or Restore Account
4. Enter the 6-digit OTP sent to your email
5. Click Restore Account

What Gets Restored

• Full login access
• Profile information
• Membership status
• Notification preferences
• Booking history

What Cannot Be Restored

• Cancelled future bookings (must re-book)
• Expired vouchers or credits
• Time-limited promotions

Blocking Conditions

Account deletion may be blocked if:

Condition	Resolution
Active bookings	Cancel or complete your bookings
Unpaid invoices	Pay outstanding balance
Pending refunds	Wait for refund processing
Active disputes	Resolve open disputes

You'll see specific details when attempting to delete your account.

Privacy Rights

Under GDPR and similar regulations, you have the right to:

Right	How to Exercise
Access	Export your data
Rectification	Update your profile
Erasure	Delete your account
Portability	Export in JSON/CSV
Restriction	Contact support
Objection	Update notification preferences

API Access

Developers can use the IDP API for programmatic account management:

# Request account deletion
POST /api/account/delete-request
Authorization: Bearer <token>

# Confirm deletion with OTP
POST /api/account/delete-confirm
{
  "otp": "123456"
}

# Request account restoration
POST /api/account/restore-request
{
  "email": "your@email.com"
}

# Confirm restoration with OTP
POST /api/account/restore-confirm
{
  "email": "your@email.com",
  "otp": "123456"
}

# Export account data
GET /api/account/export?format=json
Authorization: Bearer <token>

Where to Find These Features

TeeTime Web App

Navigate to Settings to find:

• Export your data - Format selector (JSON/CSV) with download button
• Delete account - Danger zone section with OTP confirmation flow

TeeTime Mobile App

Navigate to Profile Settings to find:

• Export Data - Uses native Share functionality
• Delete Account - Full OTP confirmation with native UI

Admin Portal (Support Staff)

Support staff can manage user accounts via the Access Control Admin:

1. View Users: Navigate to Users page to see all users with status filters
2. User Status: Visual tags show ACTIVE, DELETED, SUSPENDED, etc.
3. Soft Delete: Admin can soft-delete a user (30-day grace period)
4. Restore: Admin can restore soft-deleted users within grace period
5. Permanent Delete: Admin can permanently purge user data (irreversible)

Note: Admin actions trigger the same identity events as self-service, ensuring downstream services (bookings, memberships) are properly notified.

Support

If you need help with account management:

• Email: support@digiwedge.com
• Help Center: help.digiwedge.com
• In-App: Settings > Help & Support

For data protection inquiries:

• DPO: dpo@digiwedge.com