Formal Request for Deletion of Personal Data

[Ptolemy]

To whom it may concern,
I am writing to formally request the deletion of all personal data associated with my account on your platform.
This request is made pursuant to applicable data protection and privacy laws, including but not limited to:

• EU General Data Protection Regulation (GDPR), Article 17 (Right to Erasure / “Right to be Forgotten”), which provides that a data subject has the right to obtain the erasure of personal data without undue delay where such data is no longer necessary or where consent is withdrawn ()
• UK GDPR and Data Protection Act 2018, which incorporate and enforce equivalent rights to erasure within the United Kingdom ()
• California Consumer Privacy Act (CCPA/CPRA), which grants consumers the right to request deletion of personal information held by a business ()
• Other applicable U.S. state privacy laws (including but not limited to those in Virginia, Colorado, and similar jurisdictions), which provide comparable rights to access and deletion
• Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), which requires organizations to allow individuals to withdraw consent and request deletion where appropriate

Your service is accessible internationally and processes personal data of users across multiple jurisdictions. As such, these regulations may apply extraterritorially where services are offered to, or data is collected from, individuals in those regions.
Accordingly, I request that you:

1. Permanently delete all personal data associated with my account, including but not limited to:
   • Account details (username, email address, IP logs)
   • Profile information
   • Stored metadata and identifiers
2. Cease any further processing of my personal data
3. Confirm in writing that this deletion has been completed

If there are specific legal grounds requiring limited retention of certain data, please clearly identify:

• The specific data retained
• The legal basis for retention
• The retention period

Under GDPR and equivalent frameworks, a response is required without undue delay and within one month of receipt of this request.
If I do not receive a response within this timeframe, I will consider escalating this matter to the appropriate data protection authorities or regulatory bodies.
Please acknowledge understanding of this request.