Withdraw and erase
The portal offers two distinct actions to stop the use of your renseignements personnels. Each one requires a fresh assertion of your passkey, exactly the same ceremony as approving a consent. Both actions are idempotent and check the current status first.
Withdraw consent
Withdrawal of consent (retrait du consentement, article 8) ends a live consent. It flips the cell to revoked and keeps the record that this consent existed: being able to show that a consent was given and then withdrawn is part of the accountability Law 25 asks for.
Withdrawal is idempotent: withdrawing an already-revoked cell does nothing. Once it is done, the company's very next check denies.
Request erasure
Erasure (article 23) is the secondary, guarded control. It is irreversible.
Erasure is a request the company must honor
Erasing is a request to destroy. Agreely destroys its own copy of this consent and forwards your request to the company, which must then destroy or anonymize the information it holds without undue delay, unless the law requires it to keep it.
Because erasure cannot be undone, the portal presents it as a separate action and confirms it before running it. Like withdrawal, it is idempotent and checks the status before acting.
For developers
Agreely's destruction of its own copy and the exact residual boundary that comes with it are described in honest boundaries.