Data Privacy Rights Guide

What companies owe you under privacy law — explained plainly, with a letter generator and a tracker to see it through.

👤 Your account

⚖️ Your rights, in plain language

Under GDPR-style privacy laws (and increasingly, laws elsewhere), companies that hold your data owe you real, enforceable rights. These are the big six — what each means, and when a company may say no.

📥 AccessAsk what personal data a company holds about you, why, and who they share it with. They must answer — usually within one month. (GDPR Art. 15)
✏️ CorrectionWrong or incomplete data must be fixed without undue delay. Wrong credit or health data is worth correcting fast. (Art. 16)
🗑 Deletion (“right to be forgotten”)Ask for your data to be erased when it's no longer needed, you withdraw consent, or it was collected unlawfully. Exceptions exist (legal duties, contracts). (Art. 17)
📦 PortabilityGet your data back in a machine-readable format and move it to another service — your posts, playlists, transaction history. (Art. 20)
⏸ RestrictionFreeze a company's use of your data while a dispute is sorted out, instead of full deletion. (Art. 18)
🚫 ObjectionObject to direct marketing at any time — that one is absolute — and to processing based on “legitimate interests”. (Art. 21)

Companies may ask you to prove your identity (reasonably), may extend complex requests by up to two extra months if they tell you, and must not charge a fee unless a request is clearly excessive. If they refuse or ignore you, you can complain to your data protection authority. This page is general education, not legal advice.

✉️ Request letter generator

Fill in the fields and get a polite, firm, ready-to-send request letter. Nothing is stored or sent by this page — copy it into your own email.

🕵️ How to send it so it works

1. Find the company's privacy contact (usually privacy@ or a DPO address in their privacy policy).
2. Send from the email address tied to your account — it makes identity checks painless.
3. Keep a copy and the date: add the request to the tracker below with its status.
4. The clock is normally one month. No reply? Follow up once, then complain to your data protection authority — the tracker notes field is a good place to log each step.

🗂 My Request Tracker

Every privacy request you send, with its company, type, date and status. Records live under your local account (or guest space) on this device — create, view, edit and delete them any time.

More free tools by Dinal Studios