Their reply to my request to delete my data:
Thank you for your email requesting your right to be forgotten.
In order for us to carry out this request, we require proof of ID to ensure we only action requests made by the genuine owner of this email account. Acceptable forms of identification are,
- Recent utility bill from the last 3 months (e.g. Gas, Electric)
- Valid drivers License
- TV License within the last 12 months
- Council Tax Letter within the last 12 months
- Title Deeds
Most companies I’ve sent data deletion request just do it, but when they start to argue I just hit them with most ridiculous bullshit while acting like the most privileged bitch until they do it my way.
Try saying no, see what happens.
Fearmongering, gaslighting, lawful threats, technical jargon and the word ‘rape’ are your friend.
Just recently when requesting GDPR data deletion from UK-based company they also wanted to confirm my identity, hell they will.
I hit them with the fact that a person controlling the e-mail address can use their ‘Forgot password’ feature to take control over the account and access my sensitive data they’re in possession of or steal my identity using their own services. I also not so kindly suggested that I’ll report them so their security practices are investigated for the safety of their customers.
…they deleted the data without any further questions.
PS. Not sure about UK laws, but for GDPR: Always request confirmation of the deletion and the detailed steps they’ve taken to ensuring your data has been properly erased. They’re obligated to tell you that upon request.
I hit them with the fact that a person controlling the e-mail address can use their ‘Forgot password’ feature to take control over the account and access my sensitive data they’re in possession of or steal my identity using their own services.
this was their excuse to why they won’t delete my info without proof of ID.
I told them no, I told them that if my bank or phone provider or online grocer who all have much more important and sensitive info, namely my payment/bank details, can verify me without extra documentation, so can they, they still said no.
So I’ve filled a complaint with the ICO, there’s fuck all else I can do unfortunately…
