How to Get a Website to Delete Your Personal Data
Hala Chamaa
Just because you stopped using a website or service doesn't mean the company behind it has deleted your personal data. Think about the online stores you've purchased from, apps you've signed up for or subscriptions you've cancelled. Even if you haven't used them in years, those companies may still have your name, email address, phone number, purchase history and other personal information. If you no longer want a company holding your data, you can ask it to delete it. You can ask a website to delete your personal data. Depending on where you live, what data the company holds and why it is being processed, you may also have a legal right to request deletion.
The important part is knowing who to contact, what to ask for and what to do if they don't listen.
Before digging through privacy policies and contact forms, check whether the company appears in AgainstData. It helps you uncover companies you've shared your personal information with, understand how they handle your data and decide which ones should keep it. If you want your data deleted, AgainstData makes it easier to request data removal directly from the company, without having to manage the entire process yourself.
See who has your data. Decide who gets to keep it.
How to Delete Data From a Website
To delete data from a website, start by contacting the company that owns or operates it. Find its privacy page or data deletion form, clearly identify the personal information you want removed and submit a deletion request. Keep a copy of your request and follow up if the company does not respond.
Here's the process:
Identify the website or company that holds your personal data, including services you've signed up for, purchased from or stopped using.
Check the company's privacy policy or account settings to find out how to request deletion.
Find the company's data deletion form or privacy contact.
Submit a personal data deletion request.
Complete reasonable identity verification if required.
Save proof that you submitted the request.
Wait for the company's response.
Follow up or escalate if your request is ignored or refused.
If the website deletes the information but Google still shows it, ask Google to refresh the outdated result.
One thing is especially important:
Deleting your data from a website and removing it from Google are not the same thing.
If the website still has your information, the best place to start is with the company holding it. Removing a Google search result doesn't delete the data from the original website. AgainstData makes it easier to request deletion at the source. If the company appears in AgainstData, you can request removal without searching for deletion forms or privacy contacts yourself.
An easier way to request deletion with AgainstData
You don't need to find your personal information publicly displayed on a website to request its deletion. Companies you've signed up with, purchased from or subscribed to may still hold your personal data, even if you haven't used their services in years. AgainstData helps you discover those companies, understand how they handle your information and request deletion without having to contact each one yourself.
1. Discover your companies
Connect your Gmail or Microsoft inbox. AgainstData identifies companies you've interacted with through purchases, accounts, bookings, subscriptions and other emails.
2. Understand their data practices
AgainstData reads privacy policies, terms and deletion procedures so you can see what companies say they collect and how their deletion process works.
3. Decide who gets to keep your profile
Keep the companies you still use and trust. Choose which ones you no longer want holding your personal information.
4. Request deletion in just a few clicks
Once you've decided which companies should no longer have your personal data, you can request deletion through AgainstData. No need to search for privacy forms, figure out who to contact or write individual emails.
5. Let your AgainstData Agent take care of the rest
Your Agent sends the request from your email, handles company responses, routine verification and follow-ups, and tracks deadlines. You can follow the conversation, check the progress of your request and step in whenever you want.
Doing all of this manually can take hours, especially when you're dealing with companies you've signed up with over the years. Between finding privacy contacts, sending requests, verifying your identity and following up, even a single deletion request can involve several steps.
AgainstData helps you manage these requests in one place, without having to repeat the entire process for every company.
See who has your data. Decide who gets to keep it.
If you prefer to make the request yourself, here's exactly how to do it.
Step 1: Find Exactly What You Want the Website to Delete
Before contacting the website, get specific about what you want removed.
Start by saving:
The URL where your information appears
The email address connected to your account
Your username or account ID, if relevant
The personal information you want deleted
Screenshots of public information, if useful
Your request might concern your:
Name
Email address
Phone number
Home address
Photo
Date of birth
Account or profile
Purchase or account information
Other personal information the company holds about you
If the information is publicly visible, copy the exact URL.
A specific request is much easier to understand than simply writing, "Delete everything about me."
For example, you could say that you want the company to delete the personal information associated with your account and remove a public profile at a specific URL.
Step 2: Find Who Is Responsible for the Website
Now you need to find the right person or team to contact.
Don't assume the website's general customer service inbox is your only option.
Check the website's privacy policy
Scroll to the bottom of the website and look for pages called:
Privacy Policy
Privacy
Your Privacy Rights
Data Protection
Privacy Choices
Delete Your Data
Privacy Request
The privacy policy should tell you more about the organization handling your personal data and may explain how to submit a deletion request.
Look for a privacy request form
Some companies have a dedicated form for requests to access, correct or delete personal data.
If one exists, use it.
For California consumers, businesses covered by the CCPA must explain in their privacy policy how deletion requests can be submitted. California guidance also notes that businesses may have designated request methods that are different from normal customer support channels.
Find the company's privacy contact
You may see an email address for:
The privacy team
Data protection
A Data Protection Officer
Customer support
Under the GDPR, the organization that decides why and how your personal data is processed is known as the controller. If the company has a Data Protection Officer, you can address your request to them.
Don't let the terminology make this more complicated than it needs to be.
You are simply trying to find the organization responsible for your data and the correct place to send your request.
Step 3: Send a Personal Data Deletion Request
Once you've found the right contact, tell them clearly what you want.
A useful request should include:
Your name
The email or account associated with the website
The information you want deleted
The URL if your information appears publicly
A clear request for deletion
The privacy right you're relying on, if applicable
A request for confirmation once the deletion is complete
You don't need to write a threatening legal letter.
Clear and specific is usually better.
Copy and Paste Personal Data Deletion Request Template
You can use the template below as a starting point.
*Subject: Request to delete my personal data
Hello,
I am requesting the deletion of personal data your company holds about me.
You can identify my account or information using the following details:
Name: [Your name]
Email: [Email associated with the website]
Username or account ID: [If applicable]
Relevant URL: [If your information appears publicly]
Please delete [briefly describe the personal information you want removed] and any associated personal data that you are not required to retain.
Please also remove any public pages or profiles containing this information, where applicable.
Please confirm when my request has been completed. If you cannot delete some or all of my personal data, please explain what information you are retaining and why.
Thank you,
[Your name]*
If you're making a GDPR deletion request
You can add:
"I am exercising my right to erasure under Article 17 of the GDPR."
Article 17 gives people the right to request erasure in certain circumstances, including when personal data is no longer necessary for the purpose for which it was collected, consent has been withdrawn and there is no other legal ground for processing, or the data has been unlawfully processed. The right is not absolute, so exceptions can apply.
If you're making a California deletion request
You can add:
"I am exercising my right to delete my personal information under the California Consumer Privacy Act."
California consumers can request that covered businesses delete qualifying personal information, although the law contains exceptions that can allow some information to be retained.
You don't need to stuff your request with legal terminology. The important thing is making it clear that you are requesting deletion of your personal information.
Do You Have a Legal Right to Make a Website Delete Your Data?
Sometimes, yes.
But your right to deletion depends on where you live, which privacy laws apply to the company, what information it holds and why it needs that information.
GDPR and the right to erasure
Under Article 17 of the GDPR, commonly called the right to erasure or right to be forgotten, you can request deletion of your personal data in certain circumstances.
For example, this can apply when:
The data is no longer needed for its original purpose
You withdraw consent and there is no other legal basis for processing
You object to certain processing and there are no overriding grounds to continue
Your data has been processed unlawfully
Deletion is required to comply with a legal obligation
The right to erasure isn't absolute. A company may sometimes need to keep information for reasons such as complying with a legal obligation, exercising freedom of expression and information, certain public interest purposes or establishing, exercising or defending legal claims.
California's right to delete
California's CCPA gives consumers a right to ask covered businesses to delete qualifying personal information.
Businesses covered by the law must provide instructions for making deletion requests, and they may need to verify that the person submitting the request is actually the consumer the data relates to. Exceptions can allow a business to keep certain information.
What if GDPR or the CCPA doesn't apply to you?
You can still ask.
A website may:
Have its own account deletion system
Offer a voluntary data deletion process
Be covered by another privacy law
Agree to remove information even when it is not legally required to do so
So don't assume you have no options just because you aren't in the EU or California.
Check the website's privacy policy and make the request.
How Long Does a Website Have to Delete Your Data?
There is no universal deadline for every website.
If a privacy law applies, however, the company may have a specific period in which it must respond.
Privacy framework
Response period
GDPR
Without undue delay and generally within one month
CCPA
Within 45 calendar days
Website's own deletion process
Depends on its privacy policy and applicable law
Under the GDPR, a controller generally has to respond to requests within one month. For complex requests or a large number of requests, this can be extended by another two months, but the individual must be informed about the extension within the first month.
Under current California rules, businesses must confirm receipt of qualifying deletion requests within 10 business days and provide a substantive response within 45 calendar days. That period can be extended by another 45 calendar days when the required notice and explanation are provided.
Save the date you submitted your request.
Also keep:
Confirmation emails
Reference numbers
Screenshots
Copies of your original request
Any replies from the company
If you need to follow up later, you'll have a complete paper trail.
What Information Can a Website Ask for Before Deleting Your Data?
A company may need to verify that you really are the person whose data you're asking it to delete.
That makes sense. You wouldn't want a stranger to be able to delete your account just by sending an email pretending to be you.
Verification might involve:
Clicking a link sent to your email
Logging into your existing account
Confirming account information
Answering reasonable verification questions
Providing additional information when necessary
Under the GDPR, additional identity information can be requested when there are reasonable doubts about the identity of the person making the request. Recent EDPB guidance also emphasizes that identity verification should be proportionate to the information and circumstances involved.
California businesses may also ask for additional information to verify a deletion request, and information collected for verification must be handled for that purpose.
That does not mean you should automatically email a copy of your passport to every website you want to leave.
If a company asks for sensitive identification, check why it is necessary and whether there is a less intrusive way to verify your identity.
The goal is to delete unnecessary personal data, not hand over more of it than needed.
What if the Website Ignores Your Data Deletion Request?
Don't assume silence means your request has been rejected.
Start by checking that you sent it through the correct channel.
Then escalate step by step.
1. Follow up on your original request
Reply to the original email or request confirmation so the full conversation stays together.
Include:
The date you originally contacted them
Your request or reference number
What you asked to have deleted
Ask for an update.
Following up can take more time than sending the original request. For deletion requests you choose to make through AgainstData, your Agent can read responses, send follow-ups and track deadlines so you do not have to manage every exchange yourself.
2. Contact the privacy team
If you originally contacted regular customer support, find the company's privacy team, privacy request form or Data Protection Officer.
Send them the original request and explain that you have not received a response.
3. Ask for a reason if they refuse
A refusal shouldn't just leave you guessing.
Under the GDPR, if an organization does not intend to comply with a request, it must provide its reason. Individuals also have the right to lodge a complaint with a Data Protection Authority.
California guidance similarly states that exceptions can apply to deletion rights, and businesses should explain denials where required.
4. Escalate when necessary
If you believe your privacy rights have not been respected, your next step depends on the law that applies.
Under the GDPR, you can lodge a complaint with the relevant Data Protection Authority.
In California, consumers can use the state's privacy resources and complaint mechanisms where applicable.
Keep your original request and every response. They can help show what happened if you decide to escalate.
Can a Website Refuse to Delete Your Personal Data?
Yes, in some circumstances.
A legal right to deletion doesn't always mean a company has to wipe every record containing your name immediately.
For example, information may sometimes need to be retained for:
Compliance with legal obligations
Legal claims
Certain transaction or accounting records
Freedom of expression and information
Certain public interest purposes
Other exceptions allowed by applicable privacy law
Under GDPR Article 17 specifically, exceptions include processing needed for freedom of expression and information, legal obligations, certain public interest and research purposes, and legal claims.
So if a company responds with "We can't delete your data," don't stop there.
Ask:
What personal data are you keeping?
Why are you keeping it?
What legal basis or exception are you relying on?
Can the rest of my personal data still be deleted?
A legitimate reason to retain one record does not automatically explain why every piece of information associated with you should remain.
The Website Deleted My Data but It Still Appears on Google. What Now?
This is where people often contact the wrong company.
Google Search and the website hosting your information are two separate things.
If the website still shows your information
Contact the website.
Google cannot delete information from a third party website. It can only control what appears in Google Search. Google itself says that contacting the website owner is generally the best way to remove content at the source.
If the website removed the information but Google still shows the old version
Use Google's Refresh Outdated Content tool.
This tool is designed for pages or images that no longer exist or have been significantly changed but where the old information is still appearing in Google Search.
You don't need to own the website to use it.
The basic process is:
Open Google's Refresh Outdated Content tool.
Enter the URL containing the outdated result.
Submit the request.
Check the status of your request.
If the page has disappeared, Google may remove the result. If the page still exists but the sensitive information has been removed, Google can update what it shows after processing the request.
If the website refuses to remove sensitive information
Google also accepts requests to remove certain personal information directly from Search.
This can include eligible information such as addresses, phone numbers, email addresses, confidential government identification numbers, bank or credit card details and certain other sensitive personal information. Removing a result from Google still does not delete the information from the original website.
Think of it this way:
Website still has your data? Contact the website.
Website deleted it but Google is showing an old version? Refresh the outdated Google result.
Sensitive information remains online and qualifies under Google's policies? Request removal from Google Search too.
Deleting Your Account Is Not Always the Same as Deleting Your Data
This is an easy distinction to miss.
You click Delete account and assume everything connected to you has disappeared.
That isn't necessarily what happened.
Delete your account
Closes or removes your user account according to the website's process
Delete your personal data
Requests deletion of personal information the company holds about you
Unsubscribe
Stops or reduces marketing emails
Make a profile private
Limits who can see the profile
Remove a Google result
Changes whether or how the page appears in Google Search
If your goal is to delete all data from a website, read its privacy and deletion information rather than assuming an unsubscribe or account closure automatically covers everything.
When in doubt, ask.
"What personal data will you retain after my account is deleted?"
That's a much more useful question than assuming it's all gone.
Don't Want to Hunt Down Every Company's Privacy Form? Use AgainstData
Deleting data from one website is manageable.
Then you remember the old clothing store you ordered from once. The travel app from four years ago. The free tool you tested for a week. The subscription you cancelled but never deleted.
Suddenly, one deletion request turns into twenty.
The best place to start is with the companies you've shared your personal information with directly, from online stores and subscription services to apps you've forgotten about. These companies may still hold sensitive details like your address, phone number, purchase history and payment information. AgainstData helps you uncover those companies, understand how they handle your data and decide which ones should keep it. You can then request deletion without having to contact every company yourself. When you choose to request deletion, your AgainstData Agent takes over the communication. It sends requests from your email, reads replies, handles routine verification, follows up when necessary and tracks deadlines.
You can see the actual conversation and the company's response, rather than just a status label. And you stay in control: let the Agent handle the exchange in Auto mode, or stay involved in Review mode.
The Agent manages the process, but the company is responsible for responding to and fulfilling the request. Some information may be retained where the law allows or requires it.
See who has your data. Decide who gets to keep it.
Frequently Asked Questions About Deleting Data From a Website
How do I delete data from a website?
Find the website's privacy policy or deletion page and identify its official method for submitting privacy requests. Clearly state what personal information you want deleted, provide enough information for the company to identify your account and ask for confirmation when the request is complete. If the company appears in AgainstData, you can choose to have your AgainstData Agent manage the deletion request, including company replies and follow-ups.
How do I remove my personal data from a website?
Start with the website itself rather than Google. Find the company responsible for the site, submit a personal data deletion request and include the exact URL if your information is publicly visible. Depending on the privacy laws that apply, you may have a legal right to request erasure.
Can I ask any website to delete my data?
Yes, you can ask. Whether the website is legally required to comply depends on the privacy laws that apply, the type of data involved and why the organization is processing it. Even when a specific deletion right does not apply, the website may have its own voluntary deletion process.
Can a website refuse to delete my data?
Yes. Privacy laws can contain exceptions allowing companies to retain certain information. If your request is refused, ask what data is being retained, why it needs to be kept and whether the rest of your personal information can still be deleted.
How long does a website have to respond to a deletion request?
It depends on the law that applies. Under the GDPR, organizations generally must respond without undue delay and within one month. Under the CCPA, covered businesses generally have 45 calendar days to substantively respond, with a possible additional 45 day extension when the required notice is provided.
Does deleting my account delete all my data from the website?
Not necessarily. Account deletion and personal data deletion are related but not always identical. Check the company's privacy policy or ask what information will be retained after your account is closed.
What if a website has my personal information without my permission?
Check the website's privacy policy to understand where the information came from and why it is being processed. Depending on the applicable privacy law and circumstances, you may be able to request access, correction, deletion or restriction of the information. Under GDPR rules, for example, organizations that obtained personal data from another source generally have transparency obligations, subject to exceptions.
Can I make Google delete information from another website?
No. Google can remove eligible results from Google Search, but that does not delete the information from the website hosting it. If possible, contact the website first. If the website has already removed or changed the information but the old result remains on Google, use Google's Refresh Outdated Content tool.
If a Website Doesn't Need Your Data Anymore, Ask Them to Delete It
Finding personal information about yourself on a website can be uncomfortable. But finding it also gives you somewhere to start.
Identify exactly what the website has.
Find the company responsible.
Send a clear deletion request.
Keep proof.
Follow up if necessary.
And if the information disappears from the website but remains in Google, clean up the outdated search result too.
Most importantly, don't stop at the one company you happened to notice.
There may be other old services sitting quietly with information you've forgotten you ever gave them.
AgainstData helps you discover the companies in your digital life, understand what they say they collect and decide who gets to keep your profile. When you choose deletion, your Agent handles the request and follows up on your behalf.