Legal & rightsPractical guide · updated for 2026
How to Request Your Personal Data From a Company
A data access request asks a company for the personal information it holds about you. Send it to the privacy contact in writing, name the law that applies, and keep the date.
Have this ready
- Your account details with the company
- The privacy notice's contact address
- An email address you control
Step by step
- 1Find the company's privacy notice and the contact address it gives for data requests.
- 2Write a short request naming your details and asking for a copy of the personal data held and how it is used.
- 3If you are in the EU or UK, cite the right of access; in California, cite the applicable privacy law.
- 4State how you want to receive the data, such as by email in a common format.
- 5Send it from an address you control and keep the sent copy, date and any reference number.
- 6The company may ask for identity verification; provide the minimum needed, not more than necessary.
- 7If they refuse or ignore it, ask for the reason in writing and consider the regulator's complaint route.
Want it done with you?
I can walk you through it in a Magic Box, show you the exact clicks, or do it with you and keep the recording. You log in yourself; I never see your password.
Common questions
How long can a company take to answer?+
It depends on the law that applies, commonly a month with an extension for complex requests. Ask for the deadline in writing.
Can they charge for it?+
Usually not for a first request in the EU or UK. Some laws allow a fee for clearly excessive or repeated requests.
Does this cover deleted data?+
It covers data still held, including some backups. Ask specifically whether backups are included in their retention policy.