How to handle GDPR and CCPA requests

Estimated 3 minute read

Updated Dec 16, 2024, 4:49 PM EST

Learn how to export a profile’s complete data or a record of deletion to share with customers when they contact you with a GDPR or CCPA request.

Export a profile's data

First, navigate to the profile you want to export and click Export Profile. A modal will appear prompting you to confirm your export. Click Start Export to export the profile data.

A Klaviyo modal prompting you to confirm the export of your profile

A green callout will confirm that the profile data is available on your Downloads page. To go there, click Settings > Other > Downloads. On this page, click Download to export your profile data as a .zip file.

The Klaviyo download page where you can click download to export your profile data as a .zip file.

Record GDPR and CCPA deletion requests

When responding to a deletion request, you can choose to add a profile to your account's list of deleted profiles, preserving a record that your business has complied with the deletion request.

Only the most recent 20 deletions are shown in the list of deleted profiles. You can find other deleted profiles by using the search box.

For a profile's event history, any customer-specific information is replaced with the word "redacted," and then the customer's information is permanently deleted from Klaviyo. For every recipient record associated with a profile, the profile's email address is replaced with a random email address that starts with the word "redacted." For example, redacted.11bab993-58bb-4cc9-a654-c152dbe009e1@example.com.

A Klaviyo campaign's analytics showing a deleted profile as redacted in the recipient activity

To delete a Klaviyo profile, navigate to the profile and click Delete below the Information section. A warning message will prompt you to confirm your decision.

A Klaviyo warning message prompting you to confirm your decision to delete a profile

Check the box on the warning message to specify that the contact requested their profile be deleted in compliance with GDPR and/or CCPA. Then, the profile will be added to your account's list of deleted profiles.

Then, click Delete Person. You'll be taken to your list of deleted profiles. This list provides a permanent record that your business has complied with any deletion requests.

List of deleted profiles acting a permanent record that your business has complied with any deletion requests