Customer data requests on your site
Privacy laws in several places give people the right to ask a business what personal data it holds about them, and to ask for it to be erased. Your published site can handle both requests on its own, without anything reaching your inbox.
This page explains what the feature does, because it changes your records when someone uses it.
Where it lives
Every published site serves the page at:
yourdomain.com/data-request
It is live already. You do not switch it on.
It is not linked from your site automatically. Nobody finds it by browsing. Add the link yourself, normally from your privacy policy or your footer, so that a customer who wants to make a request has a route that does not involve emailing you.
What a visitor does
- They open the page and enter their email address.
- They choose whether they want a copy of their data or their data deleted.
- We email that address a link, valid for 24 hours.
- They open the link and confirm.
The email is the whole security model. It proves the person making the request controls that address, so nobody can read or erase somebody else's records by typing their email into a form.
The page gives the same reply whether or not you hold any data for the address, and requests are rate limited per address and per network. That combination stops the form being used to work out who your customers are, or to flood one person's inbox.
What "a copy of their data" returns
Everything you hold that is filed against that email address on that site: their contact record, their orders, their bookings, their reservations, their newsletter subscription and any messages they sent you.
What "delete my data" actually does
This is the part worth reading twice, because it is not one behaviour but two.
Marketing data is deleted outright. Newsletter subscribers and contact-form messages are removed. There is no reason to keep them once someone has asked you not to.
Transactional records are anonymised, not deleted. Orders, customers, contacts, bookings and rental reservations stay in your system, but the personal details are stripped out: name, email, phone, notes, address, and for rentals the licence and additional-driver details.
The record survives because you usually have to keep it. Tax and accounting rules generally require you to retain the order or booking itself, and deleting it outright would tear a hole in your own books. What you keep afterwards is the transaction without the person attached: the amounts, the dates and the totals still add up, and your revenue reporting does not change.
Two things to know
You are not notified. The confirmation emails go to the customer who made the request, not to you. If you want to know that a record changed, you will see it in your contacts or orders list. Nothing lands in your inbox.
A request only affects one site. It is scoped to a single project and a single email address. A customer who has bought from two of your sites has to ask each of them separately.
What this feature is not
It handles requests from your customers about their data. It is unrelated to deleting your own Webkio account, which is covered in Deleting your account.
It is also a tool, not legal advice. Which laws apply to you, and what your privacy policy has to say, depends on where you and your customers are. If you are unsure, ask someone qualified.