Data-Broker & People-Search Ecosystem
Opting Out of Having Your Data Sold or Shared
Many companies sell or share personal information about you. You can ask them to stop. Here is how the opt-out works, what it does and doesn't change, and where to begin.
In short
Opting out means telling a company to stop selling or sharing your personal data, and in many places they must comply. Under UK GDPR you have a right to object to processing for marketing. Submit an opt-out or objection in writing, keep a record, and follow up if they don't respond.
What "opting out" actually means
When a company sells or shares your personal data, it passes details about you to other organisations, sometimes for money and sometimes as part of a wider arrangement. Data brokers and people-search sites are a common example: they gather information from public records, online sources and other businesses, then make it available to others.
Opting out is simply telling such a company that you no longer want your data used in that way. Under UK GDPR you have a right to object to your personal data being processed for direct marketing, and an objection to marketing must be honoured. For other purposes, the company has to stop unless it can show a compelling, lawful reason to continue. In some other regions, laws give you a specific right to opt out of the "sale" or "sharing" of your data.
An opt-out is a request the company should act on, not a setting you flip once and forget. Different companies hold different copies of your information, so opting out with one does not reach the others. This article is general information, not legal advice.
- Selling or sharing means your data moves to other organisations.
- You can object to marketing use, and that objection must be respected.
- Each company is separate, so one opt-out does not cover them all.
How to opt out, step by step
The mechanics vary between companies, but the shape of a good opt-out is consistent. Working through it calmly, one company at a time, keeps the task manageable and gives you a clear record if you ever need to follow up.
- 1. Find the company's privacy notice or "Do not sell or share" page, often linked in the website footer or in an email you received.
- 2. Use their named opt-out method if they offer one, such as a form, a preference centre, or a dedicated email address.
- 3. If there is no form, send a short written request asking them to stop selling or sharing your personal data and to stop using it for marketing.
- 4. Include enough detail to identify you, but no more than necessary, and ask them to confirm in writing when it is done.
- 5. Save a copy of what you sent and the date. Note any reference number they give you.
- 6. If you don't hear back within a reasonable time, send a polite follow-up referring to your original request.
What changes, and what to expect next
A successful opt-out should stop that company selling or sharing your data going forward, and stop marketing aimed at you. It does not undo copies that already moved elsewhere before you asked, and it does not erase you from the internet. Information held by other brokers, search engines or public records is governed separately and may need its own request.
Responses also take time. A company may ask a question or two to confirm your identity before acting, which is normal. If a business ignores a valid objection, refuses without a good reason, or keeps marketing to you after you opted out, you can raise it with the relevant data-protection regulator. In the UK that is the Information Commissioner's Office (ICO).
Treat opting out as ongoing housekeeping rather than a single fix. New companies can collect your data over time, so it helps to repeat the check periodically. OSINTA is built to help you see your own footprint and route your own requests, calmly and on your terms. The decisions stay with you.
Frequently asked questions
Does opting out remove my data from the internet?
No. Opting out asks one company to stop selling or sharing your data and to stop marketing to you. It does not erase information already held by other companies, search engines or public records, and no one can guarantee removal from the internet.
Do companies have to honour an opt-out?
For direct marketing, yes, an objection must be respected under UK GDPR. For other uses, a company must stop unless it can show a compelling lawful reason to continue. Some regions also give a specific right to opt out of the sale or sharing of data.
How long does an opt-out take?
It varies. A company may first ask a question or two to confirm your identity, which is normal. If you get no response within a reasonable time, send a polite follow-up referring to your original request and keep your records.
What if a company ignores my opt-out?
Keep a copy of your request and follow up once in writing. If a valid objection is ignored or refused without a good reason, you can raise it with your data-protection regulator, such as the ICO in the UK.
Related terms
This is general information, not legal advice. For guidance on your own situation, consider speaking with a qualified professional.
Reviewed by OSINTA's founding lawyer — 2026-06-27.
Stop the sharing on your own terms
See how a data-rights request works, then opt out one company at a time with your records in order.