Ask a company to delete your data

Write a formal GDPR erasure request with the right legal references and the company's privacy contact filled in. Copy it and send it. The company has one month to respond.

✓ means the address was checked against the company's published privacy policy. Entries without the tick are pattern-derived (privacy@<domain>) and may bounce. Double-check on the company's site if so.
Don't see yours? Use a custom one.

Your deletion request

Open in mail app
Copied to clipboard

How GDPR erasure works

Article 17 of the General Data Protection Regulation gives everyone in the EU and EEA the right to ask a company that holds their personal data to delete it. This is often called the right to be forgotten. The company has one month to respond, and can only refuse on specific legal grounds, such as an active contract, a legal obligation or freedom of expression.

Making the request is free and you don't need to give a reason. A formal letter that cites the relevant articles makes it clear what you are asking for.

After you send it

  1. Keep the email. Your sent folder is your record.
  2. Wait one month. That is the response period under Article 12(3).
  3. If there is no reply, you can file a complaint with your country's data protection authority. It is free.
  4. If they refuse, ask them to state the legal basis under Article 17(3).

Disclaimer

This is a template, not legal advice. Contact addresses come from companies' published privacy pages and can go out of date. Check the address on the company's own website if in doubt. For complex cases, talk to a privacy lawyer.