Letter Requesting Deletion of Personal Data

Request Data Deletion UK: Free Template & Guide

Exercising your right to control your personal information is a fundamental principle of data protection in the United Kingdom. If you want a company or organisation to delete your personal data, you can make a formal request known as a data deletion request. This guide provides you with a clear, free template and step-by-step instructions to help you effectively exercise your rights under the General Data Protection Regulation (GDPR).

What is the Right to Erasure Under GDPR?

Often referred to as the 'right to be forgotten', the right to erasure is a key part of the UK GDPR. It allows you to request that an organisation deletes your personal data in specific circumstances. This right is not absolute, but it applies when the data is no longer necessary for the purpose it was collected, if you withdraw your consent, or if the data has been unlawfully processed, among other grounds. It is a powerful tool for reclaiming your privacy.

Understanding the 'Right to Be Forgotten' in the UK Context

In the UK, the right to erasure continues to be upheld post-Brexit through the UK GDPR. The Information Commissioner's Office (ICO) remains the independent authority responsible for upholding information rights. This means the process and your rights for requesting data deletion remain robust and enforceable.

What Information is Needed for a Data Deletion Request?

To ensure your request is processed efficiently, you should provide clear and specific information. This typically includes your full name, any relevant account numbers or usernames, the specific data you want deleted, and a clear statement of your request. Providing as much detail as possible helps the organisation locate your data accurately.

How to Fill Out the Data Deletion Request Template

Our free template is designed to be straightforward. Simply fill in the bracketed information with your personal details. Be precise about the services or accounts involved and specify the data you wish to have erased. Using a formal template like this ensures you include all necessary legal references, making your request more authoritative.

Key Clauses and Considerations in the Data Deletion Request

The template includes important clauses that reference your legal rights under the UK GDPR, specifically Article 17. It clearly states that you are exercising your right to erasure and asks the organisation to confirm deletion and inform any third parties. Consider if you want all data deleted or just specific information, and state this clearly to avoid confusion.

How to Send Your Data Deletion Request

Once completed, send your request directly to the organisation's data protection officer or dedicated contact address, which is often listed in their privacy policy. For a reliable record, use a method that provides proof of sending and receipt, such as recorded delivery post or an email with a read receipt requested.

What to Expect After Sending the Request

The organisation should acknowledge your request promptly. Under Article 12(3) of the UK GDPR, organisations generally have one month to respond to your request. This period can be extended by two further months where necessary, taking into account the complexity and number of requests, but they must inform you of any such extension within one month of receipt of the request, together with the reasons for the delay. They may contact you to verify your identity or ask for clarification. If your request is valid, they must comply and confirm once the deletion is complete. If they refuse, they must provide a lawful reason based on UK GDPR exemptions.

Frequently Asked Questions About Data Deletion Requests in the UK

Can I request a company to delete my data in the UK?
Yes, absolutely. Under the UK GDPR, individuals have the right to request the deletion of their personal data from organisations operating in the UK.

How to make a data deletion request?
You can make a request verbally or in writing. Using a written template, like the one provided here, is often more effective as it creates a clear audit trail.

What is the deadline for complying with an erasure request?
Organisations generally have one month to respond to your request, with a possible extension of up to two months for complex cases, as per UK GDPR Article 12(3).

Can I ask a company to delete my personal data?
Yes, this is a core data subject right. You can ask any company that holds your personal data to delete it, provided one of the legal grounds for erasure applies.

How do you ask a company to remove your information?
You should make a direct, clear request to the company's data protection contact. Specify what data you want removed and from which services.

Do companies have to delete your data if requested?
They are legally obligated to do so if your request meets the conditions for the right to erasure under the UK GDPR. There are specific exemptions where they can refuse.

How do I request to remove my personal data?
Download and complete our free template below, then send it to the organisation in question. This formal approach is often the most successful.

Your Free Data Deletion Request Template

Download your free data deletion request template now!

[Your Name]
[Your Address]
[Your Email Address]
[Date]

[Data Protection Officer / Company Name]
[Company Address]

Subject: Formal Request for Erasure of Personal Data Under UK GDPR Article 17

Dear Sir/Madam,

I am writing to formally request that you erase all personal data you hold relating to me, [Your Full Name], in accordance with my right to erasure under Article 17 of the UK General Data Protection Regulation (UK GDPR).

My details are as follows, which may help you locate my data:

• Full Name: [Your Full Name]
• Previous/Associated Names: [If applicable]
• Email Address(es) associated with my account(s): [Your Email]
• Customer/User ID(s): [If known]
• Any other relevant identifiers: [e.g., phone number, account number]

This request applies to all services and platforms operated by your organisation. I request that you:

1. Permanently delete all my personal data from your primary and backup systems.
2. Notify any third parties with whom you have shared my data to also erase it.
3. Provide me with written confirmation once the erasure is complete.

If you require any further information to verify my identity or locate the data, please contact me promptly at the details provided above.

I look forward to your confirmation and compliance within the statutory period.

Yours faithfully,

[Your Typed Name]