Skip to content
vendor
Art. 7(3) — Withdraw consent

Withdraw consent for processing.

Withdraw consent for any processing that relies on it. Past processing remains lawful — withdrawal applies going forward.

Under Article 7(3) of the GDPR you can withdraw your consent at any time, as easily as you gave it. Withdrawing consent does not affect the lawfulness of processing we carried out before you withdrew. Where processing relied only on your consent, we stop once you withdraw, unless another lawful basis applies.

What this right covers

  • Withdrawal is easy — as easy as giving consent in the first place.
  • Applies only to processing based on your consent (Article 6(1)(a) or 9(2)(a)).
  • Past processing remains lawful; withdrawal is forward-looking.
  • If you also want past data erased, file a separate erasure request.
Identity

We need to verify your identity before we can act on this request.

Which consents are you withdrawing?
Pick everything that applies
Acknowledgments

What happens next

  1. 01

    Acknowledgment

    We confirm receipt within 5 business days.

  2. 02

    Suppression

    We update suppression lists and consent records across the relevant systems. For email and SMS this is typically same-day.

  3. 03

    Verification

    We perform a check 24 hours later to confirm no remaining queued processing is affected.

  4. 04

    Confirmation

    We send written confirmation listing which consents were withdrawn and the effective date.

Legal basis & retention

We process the personal data in this request only to meet our obligations under Articles 7(3) and 12 of the GDPR. We keep a minimal suppression record for as long as needed to ensure we do not re-process under withdrawn consent; the request record itself is kept for 24 months in our compliance log.

Contact DPO