我的书签
添加书签
移除书签How to handle GDPR and CCPA requests
Estimated 2 minute read
|
Updated Sep 17, 2025, 12:00 AM EST
Table of contents
You will learn
Learn how to export a profile’s data and record a profile deletion when customers contact you with a GDPR or CCPA request.
Your user role determines whether you can export or delete profiles. If Export profile or Delete Profile is unavailable, ask your account Owner or Admin for help.
Export a profile's data
- Navigate to the profile you want to export.
- In the upper right, select Profile actions.
- Click Export profile. A modal will appear prompting you to confirm your export.
- Click Start export to export the profile data.
A notification confirms that your export has started. Click View all downloads to open the Downloads page, or navigate there manually:
- Select your account name in the lower left.
- Click Settings > Other > Downloads.
- Wait until Processing changes to Download for the profile export, then click Download to save the profile data as a .zip file.
Record GDPR and CCPA deletion requests
When responding to a deletion request, you can keep a record in your account’s list of deleted profiles. The record includes the request date and, once deletion finishes, the completion date.
The list shows 20 deletion requests per page, with the newest first. Use the pagination controls to view older requests, or use Search Profiles to find a profile by email address, phone number, or external ID.
When you delete a profile, Klaviyo redacts identifying information in its event history and permanently deletes the profile. In campaign recipient activity, a deleted profile’s email address appears as a random email address that starts with the word “redacted.”
Deleting a profile cannot be undone. If you also need a copy of the profile’s data, finish downloading the export before deleting the profile.
To delete a Klaviyo profile:
- Navigate to the profile.
- Open the Profile actions dropdown.
- Click Delete Profile. A warning message will prompt you to confirm your decision.
- Select Delete profile in compliance with data privacy request to keep a record of the request. Without this selection, Klaviyo deletes the profile without adding a deletion-request record.
- Click Delete profile to start deleting the profile and add a record to your account’s list of deleted profiles.
A Delete started notification confirms that the request was submitted. The profile remains accessible until deletion finishes. Your list of deleted profiles keeps a permanent record of the request.
Open your list of deleted profiles directly, or follow these steps:
- Select your account name in the lower left, then navigate to Settings > Other > Profile maintenance.
- Under Remove Profiles, click here in the sentence about profiles deleted in compliance with data protection laws.
On Deleted Profiles (Data Protection Requests), find the profile and check Completion Date to confirm that deletion has finished. The list displays names as initials and partially hides email addresses, phone numbers, and external IDs.
Additional resources
Learn about frequently asked questions regarding GDPR to help you be compliant. - Frequently asked questions about the CCPA and CPRA
Learn about frequently asked questions regarding the CCPA (California Consumer Privacy Act) and CPRA (California Privacy Rights Act). - How to comply with data privacy laws
Learn some some best practices for complying with data protection regulations in your marketing.
Was this article helpful?
YesNo
Use this form only for article feedback. Learn how to contact support.
Explore more from Klaviyo
Community
Connect with peers, partners, and Klaviyo experts to find inspiration, share insights, and get answers to all of your questions.
Partners
Hire a Klaviyo-certified expert to help you with a specific task, or for ongoing marketing management.
Support
Access support through your account.
Email support (free trial and paid accounts) Available 24/7
Chat/virtual assistance Availability varies by location and plan type
