You need to give the organisation enough information to identify you. This may be your full name, address, email address or other information, such as a loyalty card number.
We recommend doing this via email - that way you'll automatically have a copy of your notice and proof of posting.
If you can’t find who to send it to, check the ICO register of data controllers.
[Your full name]
[Your full address]
Data Controller/Company Secretary
[Organisation's full address]
Dear Sir or Madam,
Notice under the General Data Protection Regulation (GDPR) not to use my personal information for direct marketing
I, [your full name] of [your full address] require you to [stop / not to begin] processing personal information relating to me for direct marketing as soon as possible and in any event within one month of the date of this [letter / e-mail].
If you do not normally handle these requests for your organisation, please pass this [letter / e-mail] to your Data Protection Officer or the person who does.