A method of storing and deleting data maintains a record of backups of the stored data, the record defining an entry for each backup comprising details of the data that has been backed up and the location of the data that has been backed up. The record of backups of the stored data is updated with a new entry every time at least part of the stored data is stored at a new location different from the first location. Once an instruction is received to delete the stored data, the maintained record of backups of the stored data is accessed, and an instruction is transmitted for each respective entry in the record of backups, the instruction comprising an instruction to delete the stored data at the respective location for the respective entry.