You need to give the organisation enough information to identify you. This may be your full name, address, email address or other information, such as a loyalty card number.
Your notice needs to be in writing. We recommend doing this via email, that way you'll automatically have a copy of your notice and proof of posting.
If you can’t find who to send it to, check the ICO register of data controllers.
[Your full name]
[Your full address]
Data Controller / Company Secretary
[Organisation's full address]
Dear Sir or Madam,
Notice under the Data Protection Act 1998 not to use my personal information for direct marketing
I, [your full name] of [your full address] require you to [stop / not to begin] processing personal information relating to me for direct marketing as soon as possible and in any event within 28 days of the date of this [letter / e-mail].
If you do not normally handle these requests for your organisation, please pass this [letter / e-mail] to your Data Protection Officer or the person who does.
Please note that if you do not comply with this notice, I can apply to the court for an order against you under Section 11 of the Data Protection Act.