Legal
Privacy Policy
What we collect, why we collect it, and the rights you have over it.
Introduction
At DelistMyData, accessible from https://delistmydata.com, the privacy and security of our visitors is a top priority. This Privacy Policy describes what personal data we collect, why we collect it, how we use and protect it, and what rights and choices you have. We're pre-launch — some of what's described below (like the search-and-removal flow itself) isn't live yet, but we've written this policy to reflect what actually happens today and what will happen once it is, rather than generic language borrowed from other kinds of services.
This policy applies to information collected through our website only. It does not cover data collected offline or via third-party services that link to or from our site.
By accessing or using DelistMyData, you acknowledge that you have read and agree to this Privacy Policy. Questions or requests may be sent to contact@delistmydata.com.
Definitions
- Personal Data: Any information relating to an identified or identifiable person, including name, address, phone number, date of birth, email, IP address, and online identifiers.
- Processing: Any operation on personal data, including collection, storage, use, transfer, and deletion.
- Data Controller: DelistMyData, determining the purposes and means of processing personal data on DelistMyData.
- You / User: Any individual accessing or using DelistMyData.
Information We Collect
1. Information you provide directly
- Waitlist signups: email address and, optionally, a company name.
- Removal-search details, once that feature is live: the name, address, date of birth, and phone number you submit so we can search data-broker sites for listings that match you. There is no account registration, no password, and no payment step today — the site currently operates as an email-only waitlist.
2. Information we generate on your behalf
- Matches: records of data-broker listings that appear to match the identity you submitted, including the broker's URL and the raw listing text.
- Screenshots: images of the matching listing pages, captured as evidence of what was found and, later, of what was removed.
3. Automatically collected data
- IP address, browser type and version, operating system, and device type
- Pages visited, time and date of visit, duration, and referring URL
- HTTP request headers and server log data
We do not currently use Google Analytics or any other third-party analytics or advertising tracking service. If that changes, we'll update this section and the Cookies section below before it happens, not after.
How We Use Your Information
We process personal data for the following purposes:
| Purpose | Examples | Legal Basis (GDPR) |
|---|---|---|
| Service Delivery | Searching data-broker sites for your listings, generating removal requests, notifying you of the waitlist status | Contract / Legitimate Interests |
| Support | Responding to questions or requests sent to us directly | Legitimate Interests |
| Security & Fraud Prevention | Detecting malicious activity; protecting the service | Legitimate Interests |
| Legal Compliance | Meeting regulatory or court-ordered obligations | Legal Obligation |
Cookies and Tracking Technologies
DelistMyData currently uses only strictly-necessary cookies: session cookies and CSRF tokens required for the site to function securely. We do not set analytics, advertising, or cross-site tracking cookies today.
| Category | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Core functionality, security, session management. Cannot be disabled. | Session |
You can control or delete cookies through your browser settings; disabling strictly necessary cookies may impair website functionality.
How We Share Your Information
We do not sell your personal information. Data is shared only in these limited circumstances:
- Service Providers: Infrastructure and hosting providers that help operate our website and run the removal-search pipeline; they may only process data as instructed by us.
- Data Brokers, When You Ask Us To: When you request a removal, the minimum information a given broker requires to process an opt-out is submitted to that broker on your behalf.
- Legal Requirements: Where required by law, regulation, subpoena, or court order. We notify you where legally permitted before disclosing.
- Safety: To protect the rights, property, or safety of DelistMyData, our users, or the public.
- Business Transfers: In a merger, acquisition, or asset sale, your data may transfer. You will be notified via a prominent website notice and, where feasible, by email.
- With Your Consent: For any other purpose with your explicit prior consent.
Data Security
Here's where things stand today, plainly:
- HTTPS/TLS encryption for all data in transit, enforced site-wide.
- There is no customer-facing account system or admin panel today, so there's no login-based access path to your data to secure — see our Security page for more detail on how that changes as the product grows.
- Encryption of identity data (name, address, date of birth, phone number) at rest is planned but not yet implemented. We're not going to claim it before it's true — this section will be updated the moment it ships.
- Screenshots and match data are currently stored on our application server's disk, not a separate encrypted store.
In the event of a personal data breach likely to result in risk to your rights, we will notify affected individuals and relevant supervisory authorities within the legally mandated timeframe (e.g. 72 hours under GDPR).
Data Retention
We don't yet have a formal, automated retention/deletion window for removal-search data (identities, matches, and screenshots) — that's an active area of work, not a finished policy. Until it is, that data is retained while it's relevant to an active removal effort. Waitlist emails are retained until you ask us to remove them. You can request deletion of your data at any time — see Your Privacy Rights below.
Your Privacy Rights
Depending on your location, you may have rights to access, correct, delete, restrict, or transfer your personal data. You may exercise these rights by contacting us at contact@delistmydata.com. We will respond within the timeframe required by applicable law. You will never be penalised or discriminated against for exercising your privacy rights.
CCPA / CPRA — California Consumer Privacy Rights
The California Consumer Privacy Act (CCPA), as amended by the CPRA, grants California residents:
- Right to Know: Disclosure of categories and specific pieces of personal information collected, sources, purposes, and third parties with whom data is shared.
- Right to Delete: Request deletion of personal information, subject to exceptions (completing an active removal request, security, legal obligations).
- Right to Correct: Request correction of inaccurate personal information we hold.
- Right to Opt Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioural advertising. Should this change, we will add a "Do Not Sell or Share My Personal Information" link to our homepage.
- Right to Limit Sensitive Personal Information: Restrict use of sensitive personal information to necessary purposes only.
- Right to Non-Discrimination: We will not deny service, charge different prices, or provide lower quality because you exercised a CCPA right.
Personal information collected in the past 12 months: Identifiers (name, email, IP address); removal-search details (address, date of birth, phone number) once that feature is live; internet or network activity (browsing history, site interactions).
Submit CCPA requests to contact@delistmydata.com. We verify identity and respond within 45 days (extendable by 45 days). Authorised agents may submit requests on your behalf with proper documentation.
Other US State Privacy Rights: Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), and other states with similar privacy laws may exercise equivalent rights by contacting contact@delistmydata.com.
Links to External Websites
DelistMyData may contain links to third-party websites, including the data-broker sites our guides describe. Once you leave our site, this Privacy Policy no longer applies. We have no control over and accept no responsibility for external sites' content, privacy policies, or practices.
Do Not Track (DNT) Signals
Some browsers transmit "Do Not Track" signals to websites. There is currently no universally accepted standard for how websites must respond to DNT signals. At this time, DelistMyData does not alter its data collection practices in response to DNT browser signals.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. When material changes are made, we will update the "Last Updated" date at the top and post a prominent notice on our website, and where feasible notify subscribers via email. Your continued use of DelistMyData after any modification constitutes acceptance of the revised policy. We encourage you to review this page periodically.
Contact Us
For questions, data subject requests, or privacy complaints, please contact us:
- Website: https://delistmydata.com
- Email: contact@delistmydata.com
We aim to respond to all enquiries within 5 business days, and within applicable legal deadlines for formal data subject requests.