TL;DR: Too long, Didn’t read
The Right: Under UK GDPR, you have the “Right to Erasure” (Article 17). You can legally demand companies delete your data.
The Brokers: Companies like 192.com scrape the Electoral Roll to sell your address. You must opt out manually.
The Trap: Deleting an app does not delete your account. You must find the “Close Account” button deep in settings.
The Tool: Use our free template below to send a formal legal request to any company holding your data.
On this page...
- Step 1: The “Low Hanging Fruit” (Old Accounts)
- Step 2: Remove Yourself from “People Search” Sites
- Free Template: The “Right to Erasure” Request
- Step 3: Remove Outdated Results from Google
- Frequently Asked Questions
- Can I delete my data from the Police or HMRC?
- Does this cost money?
- What if the company ignores my erasure request?
- Can I delete my data if I'm under 18?
- Does deleting my Facebook account delete Messenger?
- What about my data on the Dark Web?
- Can I delete my NHS medical records?
- What if I bought something from a company and now want my data deleted?
- What about LinkedIn? Can I fully delete my professional profile?
Is your personal information floating around on the internet? From old social media accounts to “people finder” websites, your digital footprint is likely bigger than you think.
You might think it’s impossible to scrub your history, but under the UK GDPR, you have a powerful legal tool called the “Right to Erasure” (also known as the Right to be Forgotten).
While you can’t disappear completely (you can’t delete tax records or criminal history), you can remove about 90% of your private information from the public web.
Here is the step-by-step guide to reclaiming your privacy.
Step 1: The “Low Hanging Fruit” (Old Accounts)
The easiest way to reduce your footprint is to close accounts you no longer use. These are often the source of data leaks.
Don’t just delete the app. You must delete the account to remove the data from their servers.
Google/Gmail: Go to
myaccount.google.com> Data & Privacy > Delete your Google Account.Facebook/Meta: Go to Settings & Privacy > Settings > Your Facebook Information > Deactivation and Deletion.
Shopping Sites: Log in to old accounts like eBay, Amazon, or ASOS and search for “Close Account” in the help section.
Tip: Can’t remember where you have accounts? Search your email inbox for phrases like “Verify your email” or “Welcome to”. This will reveal accounts you created 10 years ago and forgot about.
Step 2: Remove Yourself from “People Search” Sites
This is the most important step. Companies called Data Brokers scrape public records (like the Electoral Roll) and sell your address, phone number, and family details to anyone who pays.
In the UK, the biggest offenders are:
192.com: This is the largest directory. To remove yourself, you must fill out their specific CO1 Opt-Out Form.
Review/People Finder Sites: Sites like Yelp or Trustpilot often host your data.
Electoral Roll: Contact your local council and ask to be moved to the “Open Register Opt-Out” list. This stops them from selling your details to marketing companies.
Free Template: The “Right to Erasure” Request
If a company refuses to delete your data or makes it difficult (e.g., no “delete” button), you can use the law.
Under Article 17 of the UK GDPR, you can send a formal request. They must respond within one month, and they cannot charge you a fee.
Copy and paste this text:
Subject: Right to Erasure Request – [Your Name]
To the Data Protection Officer at [Company Name],
I am writing to exercise my Right to Erasure under Article 17 of the UK GDPR.
Please remove all personal data associated with me from your systems. This includes my email address, phone number, home address, and any account history.
My details for identification:
Name: [Your Full Name]
Email associated with account: [Your Email Address]
Username (if applicable): [Your Username]
I believe that the personal data you hold is no longer necessary for the purpose for which it was originally collected. I withdraw my consent for you to process my data.
Please confirm within one month that this request has been actioned.
Sincerely,
[Your Name]
Step 3: Remove Outdated Results from Google
Sometimes, you delete a page, but it still shows up in Google search results. This happens because Google takes time to “recrawl” the web.
You can force Google to update its index using their official tool:
Copy the URL of the page that has been deleted (or the page that still shows your info).
Go to the Google Removal Tool.
Paste the URL and click “Request Removal”.
Frequently Asked Questions
Can I delete my data from the Police or HMRC?
No. The Right to Erasure is not absolute. Organizations have a legal right to keep data for specific purposes, such as law enforcement, tax records (HMRC), or bank records (usually kept for 6–7 years for fraud prevention).
Does this cost money?
No. Under GDPR, companies cannot charge you for processing a Right to Erasure request unless the request is “manifestly unfounded or excessive” (e.g., you send 50 requests a day).
What if the company ignores my erasure request?
If a company doesn’t respond within one month (or refuses without a valid legal reason), you can escalate to the Information Commissioner’s Office (ICO).
Steps:
- Go to ico.org.uk/make-a-complaint
- File a formal complaint with evidence of your original request
- The ICO can investigate and fine companies up to ÂŁ17.5 million for GDPR violations
Most companies respond quickly once they know you’ve escalated to the regulator.
Can I delete my data if I'm under 18?
Yes. Children (anyone under 18 in the UK) have stronger erasure rights than adults. If you posted something online when you were a child—even if you’re now an adult—you have a legal right to have it removed.
This applies to:
- Old social media posts from when you were a teenager
- Photos or videos posted by others without your consent
- School or youth organization records (in some cases)
Companies must prioritize erasure requests from minors.
Does deleting my Facebook account delete Messenger?
No. Facebook and Messenger are separate apps, but they share the same account.
When you delete your Facebook account:
- Your profile, posts, and photos are deleted
- Your Messenger conversations are deleted
- But if you only delete the Facebook app and keep Messenger, your account still exists
To fully delete: Go to Facebook Settings → Delete Account (this removes both).
What about my data on the Dark Web?
The Right to Erasure only applies to legal companies that fall under UK GDPR. If your data has been leaked or sold on the dark web (e.g., from a data breach), you cannot demand deletion because:
- The dark web operates outside legal jurisdiction
- You don’t know who controls the data
What you CAN do:
- Report the breach to the ICO if a company was responsible
- Use a credit monitoring service (Experian, Equifax)
- Change passwords immediately
- Consider freezing your credit
Can I delete my NHS medical records?
No. The NHS has a legal obligation to keep your medical records for specific timeframes:
- Adult records: Kept for a minimum of 8 years after your last treatment
- Children’s records: Kept until the child turns 25 (or 26 if they were 17 at the time of last treatment)
- Mental health records: Kept for 20 years after discharge
However, you can request that incorrect or outdated information be corrected under the Right to Rectification (Article 16 of GDPR).
What if I bought something from a company and now want my data deleted?
Companies can refuse your erasure request if they need your data to:
- Fulfill a legal obligation (e.g., warranty claims, tax records)
- Defend against legal claims (e.g., proof of purchase for returns)
- Process refunds or handle disputes
Timeframes:
- Most retailers keep purchase data for 6-7 years (for tax and fraud prevention)
- After that period, you can request deletion
Workaround: You can ask them to anonymize your data instead (remove your name and contact details but keep the transaction record).
What about LinkedIn? Can I fully delete my professional profile?
Yes. LinkedIn makes it intentionally difficult, but here’s how:
- Click your profile icon → Settings & Privacy
- Go to Account preferences → Account management
- Click “Closing your LinkedIn account”
- Follow the prompts to permanently delete
Important:
- LinkedIn gives you a 20-day grace period—during this time, you can cancel the deletion
- After 20 days, your profile and data are permanently deleted
- Before deleting: Download your data (Settings → Get a copy of your data)
Warning: If you just “hide” your profile or deactivate it, your data still exists on LinkedIn’s servers. Only full deletion removes it.
We are not solicitors. This guide explains your statutory rights under the UK GDPR. Some data (like criminal records or tax history) is exempt from deletion requests.
