To remove your traces from the internet, first find out where they are: the public web, brokers and breaches. Then send GDPR erasure requests under Article 17 to the organisations concerned. The usual response deadline is one month.
The practical process is: free scan → choose what to delete → Remove my data. This guide complements the digital footprint and GDPR removal guide and digital footprint definition.
Why remove your traces from the internet?
Your online traces appear in directories, people search sites, marketing databases, Google results, social networks and sometimes breaches. They can be used for advertising, scoring and the sale of databases. Removing personal data online can help you:
- Limit exposure of your name, address and phone number.
- Reduce spam and unsolicited calls.
- Protect against identity theft and misuse of your information.
- Exercise your rights: the GDPR gives you a right to erasure under Article 17, which you can exercise with the organisations concerned.
How do you protect personal data online? First, find out where it is. Without checking your exposure, it is difficult to act effectively.
What can be removed: brokers, public web and delisting
Data brokers
Data brokers collect and sell personal information. Many offer opt-out procedures: you can request removal from brokers through a form or email. The right to erasure applies, and they normally have one month to respond. We can help identify where you appear and send requests for you.
Public websites and search engines
For web pages mentioning you, such as articles, directories and forums, there are two approaches:
- Request removal at the source: contact the website hosting the information and invoke the right to erasure. If the website removes the page or your name, search engines will eventually reflect that change.
- Delisting: ask Google or another search engine to stop displaying a link in searches for your name. We explain this in our right to be forgotten and Google delisting guide and removing your name from Google results. For people search sites and directories, removal at the source is often the more lasting approach.
Removing a Google result therefore involves removal at the source, a delisting request, or both.
Data breaches
If your credentials or data have leaked following a hack, you cannot erase the breach itself. You can change your passwords using our five-minute guide, enable two-factor authentication and monitor your accounts. See the seven-day plan and spam after a breach. A scan includes known breach checks so you can identify affected accounts.
Steps to remove your traces from the internet
- Run a scan: identify where you appear across the public web, brokers and breaches. Our free scan produces a personalised report.
- Choose what to remove: all or part of the findings, by source type or individual entry.
- Send requests: do this yourself through organisations' forms and emails, or authorise us to prepare and send erasure requests on your behalf.
- Track replies: organisations generally have one month to respond. Follow up when needed.
Removing information from the internet relies on these steps. The better your presence is mapped, the more targeted your requests can be.
Ready to start? Run a free scan of your online presence. You will see where you appear, then Remove my data guides you through choosing what to remove and tracking replies.
See also: Digital footprint and GDPR removal guide · GDPR Article 17: the right to erasure · Data brokers: remove your information · Data removal services: the 2026 guide
