Data Requests
Answer Data Requests Without the Scramble.
Give visitors a proper way to ask for their personal data, confirm who they are, and handle every request inside WordPress — with the legal deadline tracked for you.
The Problem
A data request shouldn't start a panic.
Under UK and EU GDPR, anyone can ask what personal data you hold about them — and you have one month to answer.
01
A request arrives
By email, a contact form or social media. Easy to miss, easy to lose.
02
Is it really them?
Sending someone’s data to the wrong person is a data breach in itself.
03
Where is their data?
Orders, form entries, comments, plugin tables — spread right across your site.
04
The clock is running
One month to respond, whether or not you have found everything yet.
Data Requests gives every request a proper process.
Request Form
A proper front door for data requests.
Add the request form to any page with a single shortcode. Visitors choose what they would like you to do, and every request is confirmed by email before it reaches you — so you know it really came from them.
- Get a copy of their data
- Correct their data
- Delete their data
- Withdraw their consent
How a request flows
- The visitor fills in the form on your site
- They confirm by clicking the link emailed to them
- The request lands in your inbox with its due date
- You respond, and the request keeps a record of what you did
Always know where you stand
- New — confirmed and waiting for you
- In progress — you are working on it
- Completed — answered and recorded
- Rejected — with your reason kept on file
Request Inbox
Every request and every deadline in one place.
Each confirmed request is given a due date one calendar month from confirmation. If a request is complex, you can extend it to three months in total — the reason is recorded with the request.
- Due dates calculated for you
- Extensions recorded with a reason
- Notes and a full history on every request
- Email the requester from inside the request
The Tools
Find, export and erase — without leaving WordPress.
Built on WordPress’s own privacy tools, with extra help for the data other plugins leave behind.
01
Export
Create a download of everything WordPress and your plugins hold for that email address, as HTML and JSON.
02
Erase
Run WordPress’s erasers for that person, with a confirmation step so nothing is deleted by accident.
03
Search your database
Look for the email address across every table on your site, including plugins that don’t use WordPress’s privacy tools.
04
Your checklist
Keep a list of the other places you hold data — a mailing list, your accounts software — and tick each one off per request.
Export files are stored privately on your own server — never sent to a third party.
Trust Armory Pro
Included with Trust Armory Pro.
Data Requests is part of Trust Armory Pro. No extra plugin, no external service, no per-request fees.
Requests and exports stay on your own site.
Be Ready For The Next Request.
Add a request form, track every deadline and keep a record of what you did — all inside WordPress.