You need to give the organisation enough information to identify you. This may be your full name, address, email address or other information, such as a loyalty card number.

We recommend doing this via email - that way you'll automatically have a copy of your notice and proof of posting.

If you can’t find who to send it to, check the ICO register of data controllers.

Download Letter

[Your full name] 

[Your full address] 

[Today's date] 

Data Controller/Company Secretary 

[Organisation's full address]

Dear Sir or Madam, 

Notice under the General Data Protection Regulation (GDPR) not to use my personal information for direct marketing 

I, [your full name] of [your full address] require you to [stop / not to begin] processing personal information relating to me for direct marketing as soon as possible and in any event within one month of the date of this [letter / e-mail]

If you do not normally handle these requests for your organisation, please pass this [letter / e-mail] to your Data Protection Officer or the person who does. 

Yours faithfully, 

[Your name]

Download Letter

Find the right letter

Please tell us what you think of the Which? Consumer Rights website.

Your feedback is vital in helping us improve this site. All data will be treated confidentially. This survey will take approximately 5 minutes to complete.

Please take our survey so we can improve our website for you and others like you.