How to ask a company to delete your data in the UK
In short
- Under UK data protection law you can ask a company to delete your personal data, in writing or out loud.
- It has one calendar month to respond, or up to two months more for complex requests if it tells you why within the first month.
- The right isn’t absolute. If the company refuses without good reason or doesn’t reply, you can complain to the ICO.
An app you tried once, a shop you ordered from years ago: each may still hold your name, email and phone number. The UK GDPR gives you the right to ask them to delete it, often called the right to be forgotten.
How to ask
The ICO says you can ask verbally or in writing, but writing gives you a record. Email the company’s privacy or data protection contact, usually named in its privacy policy. Say you’re asking for your personal data to be erased, which account or details you mean, such as your phone number, and how to reach you.
How long it takes
The company has one calendar month to respond. For complex requests it can take up to two months more, but it has to tell you within the first month and say why. If it needs to check who you are, the clock starts once you’ve sent what it asked for.
When it can say no
The right isn’t absolute. A company can keep data it needs, for example to meet a legal obligation such as keeping financial records, or to make or defend legal claims. It can also refuse, or charge a reasonable fee, if a request is manifestly unfounded or excessive.
Only want the marketing to stop?
You can object to direct marketing at any time, and the company has to stop. For phone calls, see cutting down sales calls.
If it doesn’t reply
Raise it with the company first. If that doesn’t work, you can complain to the Information Commissioner’s Office (ICO).
Fewer places with your number
The easiest data to delete is data you never handed over. For sign-ups you don’t want your number on, a one-time number from ReserveSMS takes the code instead; ours start at $1. See keeping your number private.
Common questions
How long does a company have to delete my data?
One calendar month to respond under UK GDPR. For complex requests it can take up to two months more, if it tells you why within the first month.
Can I ask a company to delete my data over the phone?
Yes. The ICO says you can ask verbally or in writing, but a written request gives you a record.
Can a company refuse to delete my data?
Sometimes, for example when it has to keep the data by law. If you think it’s wrong, you can complain to the ICO.