A member emails you on a Tuesday. Polite, brief, slightly formal in a way that makes your stomach tighten: "Could you tell me what personal data you hold about me, and delete my account and all associated information?"
Your first reaction is probably a small spike of panic followed by a strong urge to reply "of course, done!" without checking anything. Do not do that. Not because the request is a problem, but because a confident answer you cannot back up is much worse than a considered one that arrives on Thursday.
I am not a lawyer and this is not legal advice, and the specifics genuinely vary by where you and your members live. What I can give you is the practical version: what you almost certainly hold without realizing, what to do in the first forty eight hours, and the one page document that turns this from a scary email into a fifteen minute task.
First, find out what you actually hold
Most creators dramatically underestimate this, because member data accumulates in places that do not feel like databases.
Go and list every place a member's information lives. Do it properly, once, and you will never have to do it again. The usual suspects:
Your community platform, which holds their name, email, profile, posts, comments, messages, and login history. Your payment processor, which holds billing name, partial card details, transaction history, and possibly a billing address. Your email tool, which holds their address, engagement history, and any tags you have applied. Your form tools, which hold every survey and application response they ever submitted. Your video calls, which may hold recordings with their face and voice in them. Your own inbox, which holds years of correspondence. Your notes, whether that is a proper tool or a document called notes dot txt. Any spreadsheet you ever exported. And your bookkeeping records, which hold invoices with their name on them.
That last one matters, because it is the reason the answer is never simply "everything is deleted." More on that shortly.
While you are doing this inventory, you will find at least one thing that makes you wince. A three year old exported spreadsheet with two hundred members' emails in your downloads folder. A survey where you asked something more personal than you needed. A shared document with member details that four people can access. Fix those today. That is the real value of this exercise, and it is worth doing before anyone asks.
The three requests you will get
They are different and people use the words interchangeably, so ask which one they mean if it is unclear.
Access. "What do you have about me?" You provide a copy or a clear description.
Deletion. "Remove it." You delete what you can and explain what you cannot.
Correction or opt out. "Change this" or "stop emailing me." Usually the easiest, and often what someone actually wants when they write an alarming sounding email.
A surprising share of scary requests are really "I want to stop being contacted and I could not find the unsubscribe link." Read carefully before mobilizing.
What to do in the first forty eight hours
Acknowledge fast, act carefully. Same day acknowledgment, even if the work takes a week.
"Thanks for writing. Yes, absolutely. I am going to go through everywhere your information lives and come back to you by Friday with what I hold, what I am deleting, and the small number of things I have to keep for accounting and why. If you would like me to stop emailing you in the meantime, that is done as of now."
That message does four good things. It says yes without overpromising. It sets a date. It flags in advance that some retention is normal, which prevents a second, angrier email later. And it solves the most likely underlying annoyance immediately.
Then verify who you are talking to, gently. Reply to the address on the account, or ask them to confirm from it. Never send someone's personal data to an address you have not verified, because a data request is a genuinely attractive route for someone trying to get information about another person. One sentence handles it: "I will send this to the email on the account, just so I know it is going to the right person."
Then do the work, in order
Delete or anonymize the account on your platform. Note that deleting a member sometimes removes their posts, which can leave holes in conversations. Ask them which they prefer if your tools allow a choice: full deletion, or keeping the content with their name and profile removed. Many people are happy with the second, and it is kinder to the community's history.
Remove them from your email tool properly, not just marking them unsubscribed if they asked for deletion.
Delete survey responses, application answers, and any notes you kept. Notes are the ones people forget. If you have written anything about a member anywhere, it is part of this.
Handle recordings honestly. If they appear on a recorded call that lives in your library, say so and offer what you can: removing the clip, muting a section, or deleting the recording. This is the hardest one technically and the one where a straightforward explanation matters most.
Delete exports and spreadsheets. Then empty the place your deleted files go, if that is how your system works, and say so.
And keep what you are genuinely required to keep. Invoices, payment records, and tax documents usually have to be retained for a period set by your jurisdiction, and that is a legitimate reason to hold a name and a transaction. Say it plainly: "I have to keep the invoice records for tax purposes for a set number of years, that is the only thing remaining, and it is not used for anything else."
The reply that lands well
Short, structured, no defensiveness.
"Here is where your information was and what has happened to it. Community account: deleted, along with your profile and messages. Posts: name and profile removed, text kept so threads still make sense, as you asked. Email list: removed entirely. Survey answers from March: deleted. My notes: deleted. Two recorded calls you spoke on: your section removed from both. Payment records: retained, because I am required to keep invoices for tax purposes, and they are not used for anything else. If anything here is not what you wanted, tell me and I will fix it."
Then, once it is done, offer nothing else. No pitch, no "we would love to have you back," no discount to stay. Someone exercising a privacy right and receiving a marketing message in reply will not forget it, and they will tell people.
Build the one page now, before you need it
This is the part that turns the whole subject from anxiety into admin.
Write a single internal document listing every system that holds member data, what it holds, who has access, and how you delete from it. Six or eight lines. Update it when you add a tool.
Then write the member facing version, three short paragraphs, and put it somewhere findable: what you collect, what you use it for, and how to ask for a copy or deletion, with a specific email address. Plain language, no legalese you copied from a template you do not understand.
And while you are there, do the audit that prevents most problems: stop collecting things you do not need. Every optional field on your signup form is a future liability with no upside. You almost certainly do not need dates of birth, addresses, phone numbers, job titles, or anything about anyone's health, finances, or identity. If you cannot name what you would do with a field this quarter, delete the field.
The habits that make this permanently easy
Never keep member data outside your tools. No spreadsheets on your desktop, no member lists in a notes app, no exports sitting in a downloads folder for two years.
Never write anything about a member you would not be willing to show them. This is a good rule ethically and it is also an excellent operational rule, because a data request means someone might read your notes.
Do not share member information with anyone who does not need it, including guests, collaborators, sponsors, and other members. Especially not sponsors.
Tell people when calls are recorded, before they speak, every time, and give them a way to participate without appearing.
And when someone leaves, delete their data on a schedule rather than keeping it in case they come back. "In case they come back" is how you end up holding information about eleven hundred people who have not thought about you in three years.
Do this this week
Make the inventory. Every system, what it holds, how you delete from it. Thirty minutes, one page, and you will find something to fix immediately.
Then delete one thing you should not have: an old export, a spreadsheet, a survey full of answers you never used. Genuinely delete it. That single act reduces your risk more than any policy document.
And write the three paragraph member facing note with a real email address for requests. Then, on the Tuesday the email arrives, you will reply within the hour with a date and a plan, and the whole thing will feel like what it actually is, which is a normal part of running a business that people trust with their details.