No data deletion or erasure mechanism visible on the page
The right to erasure (also called the 'right to be forgotten') exists under GDPR and some similar laws, subject to conditions and exceptions. Whether it applies to you depends on where your visitors are. This check looks for a visible, easy-to-find way for users to request that their personal data be deleted.
Why this matters
If a user has to dig through your site or send a generic contact form to ask for deletion, regulators may view that as a barrier to exercising their rights where those laws apply. A clear mechanism can reduce that risk and help build trust.
How to fix it
Add a "Delete my data" link or form to your privacy policy and account settings pages. If you do not have a self-serve option, a dedicated privacy@ email address that is clearly labelled for deletion requests is a compliant alternative.
Turn website findings into an action plan
Create an account to start a Full Audit of your website, with supporting evidence and a prioritised action plan.
Start Full Audit