How to handle GDPR and CCPA requests

read
Last updated at:

You will learn

Learn how to export a profile’s complete data or a record of deletion to share with customers when they contact you with a GDPR or CCPA request.

Export a profile's data

First, navigate to the profile you want to export and click Export Profile. A modal will appear prompting you to confirm your export. Click Start Export to export the profile data.

A Klaviyo modal prompting you to confirm the export of your profile

A green callout will confirm that the profile data is available on your Downloads page. On this page, click Download to export your profile data as a .zip file.

The Klaviyo download page where you can click download to export your profile data as a .zip file.

Record GDPR and CCPA deletion requests

When responding to a deletion request, you can choose to add a profile to your account's list of deleted profiles, preserving a record that your business has complied with the deletion request.

When deleting a profile in Klaviyo, the profile’s event history, as well as every recipient record associated with the profile, remains in Klaviyo, but any sensitive data associated with the profile is removed.

For a profile's event history, any customer-specific information is replaced with the word "redacted," and then the customer's information is permanently deleted from Klaviyo. For every recipient record associated with a profile, the profile's email address is replaced with a random email address that starts with the word "redacted." For example, redacted.11bab993-58bb-4cc9-a654-c152dbe009e1@example.com.

A Klaviyo campaign's analytics showing a deleted profile as redacted in the recipient activity

To delete a Klaviyo profile, navigate to the profile and click Delete below the Information section. A warning message will prompt you to confirm your decision.

A Klaviyo warning message prompting you to confirm your decision to delete a profile

Check the box on the warning message to specify that the contact requested their profile be deleted in compliance with GDPR and/or CCPA. Then, the profile will be added to your account's list of deleted profiles.

Then, click Delete Person. You'll be taken to your list of deleted profiles. This list provides a permanent record that your business has complied with any deletion requests. 

List of deleted profiles acting a permanent record that your business has complied with any deletion requests

You can access your list of deleted profiles by navigating to your Account > Settings > Profile Maintenance and clicking the link labeled here.

Profile maintenance tab in Klaviyo showing the remove profile feature

Additional resources

x
Was this article helpful?
63 out of 81 found this helpful