Your data rights
How to Calmly Ask a Data Broker to Stop Using Your Data
A plain-language, do-it-yourself guide to writing your own request to a data broker — using your UK GDPR rights to object and to erasure — calmly, in your own words, and on your own terms.
In short
To ask a data broker to stop using your data, send your own short written request citing your UK GDPR right to object (Article 21) and, where it applies, your right to erasure (Article 17). State clearly what you want stopped, keep a dated copy, and allow them one calendar month to reply.
What a data broker is — and what you can ask
A data broker is a company that collects personal data about people, often from public and commercial sources, and combines it into profiles that it shares or sells to others. You may never have dealt with such a company directly, which is part of what makes receiving their attention feel uncomfortable. Knowing the basics puts you back in a calm, informed position.
Under the UK GDPR you have rights you can use yourself, in your own words. The two most relevant here are the right to object (Article 21), which lets you ask an organisation to stop certain uses of your personal data, and the right to erasure (Article 17), which lets you ask it to delete personal data about you in certain circumstances. You decide whether and when to use them.
These are your requests to make. The point of this guide is to help you write and send your own message clearly — not to act on your behalf, and not to promise any particular outcome. This is general information, not legal advice.
Writing and sending your own request, step by step
You do not need a special form, a template service, or a lawyer to ask a data broker to stop using your data. A short, polite written message that clearly states what you want is enough. Sending it yourself keeps you in control of every step and gives you a dated record.
- Find the company's privacy or data-protection contact — usually listed in its privacy notice or on a 'your rights' or 'contact' page.
- Write a short message stating that you are exercising your right to object (Article 21) to its use of your personal data, and your right to erasure (Article 17) where you want data deleted.
- Describe clearly what you are asking it to stop, and include enough detail for the company to find your records and confirm who you are.
- Ask it to confirm what it has done in response, and keep a dated copy of exactly what you sent.
- Allow the company one calendar month to reply before following up.
What to expect — and what no one can promise
A data broker usually has one calendar month to respond to a rights request. It should tell you what action it has taken or, if it is declining, give you a clear reason. The right to object and the right to erasure both apply in certain circumstances rather than in every case, so an organisation may sometimes have a lawful basis to continue holding some data.
Because outcomes depend on the facts and on the law, no honest guide — and no product — can guarantee that a particular request will succeed or that data will disappear everywhere. What you can rely on is the process: you have a clear right to ask, the organisation has a duty to consider your request and respond, and you have a record of having asked.
If a company does not reply within the time allowed, or refuses without a valid reason, you can raise a complaint with the Information Commissioner's Office (ICO). Keeping your dated copies makes that step straightforward. This remains general information, not legal advice — for advice about your own situation, consider speaking to a qualified professional.
Frequently asked questions
Can OSINTA send the request to the data broker for me?
No. OSINTA helps you understand your own footprint and prepare your own request, but you send it yourself and stay in control of every step. The right to object and the right to erasure are yours to exercise.
Will asking guarantee my data is deleted everywhere?
No one can promise that. The right to object and the right to erasure apply in certain circumstances, and an organisation may sometimes have a lawful basis to keep some data. You have a clear right to ask and to receive a reasoned reply, but not a guaranteed outcome.
Which right should I cite — object or erasure?
If you want a company to stop a particular use of your data, the right to object (Article 21) fits. If you want data deleted, the right to erasure (Article 17) applies in certain cases. You can mention both in one calm message and let the company respond to each.
How long does the company have to respond?
Usually one calendar month from when it receives your request and confirms your identity. If it does not reply in time or refuses without a valid reason, you can complain to the Information Commissioner's Office (ICO).
Related terms
This is general information, not legal advice. For guidance on your own situation, consider speaking with a qualified professional.
Reviewed by OSINTA's founding lawyer — 2026-06-27.
Ready to prepare your own request?
OSINTA helps you understand your own footprint and word your own data-rights requests — you stay in control of every step.