247999.XYZ Tools / Protect / Data request letter Sign inCreate account

Data request letter

Write a GDPR, UK GDPR or CCPA letter asking a company for a copy of your data or to delete it. Ready to copy, email or download. Made in your browser.

Usually in the company's privacy policy, under "Contact us" or "Data protection officer".
What do you want?

This is a template, not legal advice. Keep a copy and note the date you sent it.

Ask a company what it knows about you

Privacy laws give you the right to ask a company for a copy of your personal data, and in many cases to have it corrected or deleted. Companies must answer within a set time. This tool writes the request for you, quoting the right parts of the law.

Your main rights

  • GDPR and UK GDPR: access (Article 15), correction (16), erasure (17), restriction (18), portability (20) and objecting to direct marketing (21). The company has one month to reply, and it's free.
  • CCPA (California): the right to know (§ 1798.110), delete (§ 1798.105), correct (§ 1798.106), opt out of sale or sharing (§ 1798.120) and limit use of sensitive data (§ 1798.121). The company has 45 days to reply.

Tips

  • Send it from the email address you use with the company, so they can match it to you.
  • Use the contact in the company's privacy policy. Many have a privacy form or a data protection officer.
  • Keep a copy and note the date. If they don't reply in time, you can complain to the regulator.

Questions

Is what I type saved or sent to you?

No. The letter is written in your browser. "Open in email app" passes it to your own email program.

Does a company outside Europe have to answer a GDPR request?

GDPR also covers companies outside the EU that offer goods or services to people in the EU or monitor their behaviour there. If you're not sure which law applies, choose "Other country" for a general request.

Is this legal advice?

No. It's a template based on the text of each law. For a dispute, talk to a lawyer or your local data protection authority.