Privacy Notice
Version 1.0 · 20 April 2026
Who we are
DataDelete is a UK personal data removal service. We act on your behalf to send legally required opt-out and erasure requests to UK data brokers — companies that hold and share your personal information.
We are the data controller for the personal information you provide to us when you sign up. That means we decide how and why your data is used.
Contact us:
Email: [email protected]
Website: datadelete.uk
ICO registration: DataDelete is registered with the Information Commissioner's Office. Registration number: [PENDING]
What personal data we collect
We collect the following information when you sign up for the DataDelete service:
| Data | Why we need it |
|---|---|
| Full name | To identify your records at each data broker. Requests submitted without your name will be rejected. |
| Current address | Most brokers hold records keyed to your address. We need it to locate and remove your records. |
| Previous addresses | Some brokers hold historical address records. Providing previous addresses improves removal coverage. |
| Date of birth | To confirm your identity with brokers who require it and to distinguish you from others with the same name. |
| Phone number | Required for registration with the Telephone Preference Service (TPS) and for brokers that hold phone-number records. |
| Email address | To create your account, send you service updates, and receive broker responses on your behalf. |
We also collect your email address if you join our pre-launch waitlist. We use it only to notify you when the service launches.
We do not collect financial payment information directly. Payment is handled by our payment provider. We do not see or store your card details.
We do not collect special category data (such as health information, race, religion, or political opinions). Please do not send us any.
How we use your data and why we are allowed to
Running the removal service — Article 6(1)(b): contract performance
When you sign up for DataDelete, you enter a contract with us. We use your name, address, date of birth, phone number, and email address to perform that contract — specifically, to send removal and opt-out requests to the data brokers we cover on your behalf.
- Sending Article 17 (erasure) requests to data brokers
- Sending Article 21 (direct marketing objection) requests to data brokers
- Registering you with the Telephone Preference Service (TPS) and Mailing Preference Service (MPS)
- Monitoring broker responses and tracking compliance deadlines
- Escalating non-compliant brokers to the ICO on your behalf
- Running 60-day re-checks to confirm your data has not been re-listed
Marketing emails — Article 6(1)(a): your consent
If you tick the optional marketing consent checkbox when signing up, we will send you emails about new brokers we add to our coverage, service improvements, and relevant news about your data rights. You can withdraw this consent at any time by emailing [email protected] or clicking the unsubscribe link in any marketing email. Withdrawing consent does not affect the removal service.
We do not use your data for any other purpose. We do not sell your data. We do not use it for advertising.
Who we share your data with
Data brokers — the whole point of the service
We send your personal data to UK data brokers on your behalf. That is the service. We send only the data each broker requires to process your request. A full list of the brokers we cover is published on our website at datadelete.uk.
Service providers
We use the following third-party companies to run DataDelete. Each is bound by a data processing agreement with us and may only use your data on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Web application hosting (datadelete.uk) | USA (Standard Contractual Clauses apply) |
| Vercel KV | Waitlist data storage | USA (Standard Contractual Clauses apply) |
| SendGrid (Twilio Inc.) | Sending emails to brokers and to you | USA (Standard Contractual Clauses apply) |
We use Standard Contractual Clauses approved by the UK ICO when transferring your data to these US-based providers. We do not share your personal data with anyone else.
How long we keep your data
| Data type | Retention period | Reason |
|---|---|---|
| Account data (name, address, DOB, phone, email) | Duration of your subscription + 6 months | To handle post-cancellation queries and run the final 60-day re-check cycle |
| Broker request records | 3 years from date of request | To evidence compliance and support ICO complaints or legal proceedings if needed |
| Waitlist email address | Until service launches and you are invited to sign up, or 12 months from sign-up — whichever is sooner | To fulfil our promise to notify you at launch |
| Marketing email consent record | Until you withdraw consent, then 1 year | To demonstrate we had your consent if ever questioned |
| Payment records | 7 years | To meet our legal obligation to keep financial records under UK tax law |
When a retention period expires, we delete your data securely. We do not archive it.
Your rights
Right to access (Article 15) — You can ask us for a copy of all the personal data we hold about you. We will provide it within one month. Email [email protected] with the subject line "Subject Access Request."
Right to rectification (Article 16) — If any data we hold about you is wrong, tell us and we will correct it without delay.
Right to erasure (Article 17) — You can ask us to delete your data. We will do so unless we need to keep it for a legal reason (for example, financial records we are required to retain).
Right to restrict processing (Article 18) — You can ask us to stop using your data in certain circumstances — for example, if you dispute its accuracy while we verify it.
Right to data portability (Article 20) — Where we hold data you gave us and process it on a contract or consent basis, you can ask for a copy in a machine-readable format (CSV or JSON).
Right to object (Article 21) — You can object to us processing your data. You always have an absolute right to object to direct marketing — if you do, we will stop immediately.
Right to withdraw consent (Article 7) — If we rely on your consent for anything (marketing emails only), you can withdraw it at any time by emailing [email protected].
Automated decision-making (Article 22) — We do not make any automated decisions about you that have a significant legal or similar effect. Our automation sends requests to brokers — it does not evaluate or profile you.
To exercise any of these rights, email [email protected]. We will respond within one month. We will not charge you for exercising your rights.
Cookies
The DataDelete website uses only the cookies that are strictly necessary to make the site work. We do not use tracking cookies, advertising cookies, or analytics cookies without your consent.
Changes to this notice
If we make significant changes to how we use your data, we will email you to let you know before the change takes effect. The date at the top of this notice shows when it was last updated.
How to complain
If you are unhappy with how we have handled your personal data, please contact us first: [email protected]. We will respond within 5 working days.
If you are not satisfied with our response, you have the right to complain to the UK's data protection regulator:
Information Commissioner's Office (ICO)
ico.org.uk/make-a-complaint
Telephone: 0303 123 1113