Handle a Do Not Sell or Share request

The switches in Your Privacy Choices, and Global Privacy Control, opt a visitor out in their own browser. But you may also hold their details elsewhere: an email list, form entries, customer lists you upload to ad platforms. “Opt out using your email” covers that information, and GoConsent helps you act on it in time.

What happens when someone asks

• The visitor opens Your Privacy Choices, clicks Opt out using your email, enters their email (their name is optional) and clicks Send opt-out request. No account or ID is needed. (With Pro, the link reads Opt out or make a privacy request.)
• They see that the request was received, and get a receipt by email with the date you’ll act by.
• You get an email with the request, its due date and a checklist. It goes to your site’s admin email and to your Privacy contact email (Settings › Business). Reply to it and your answer goes straight to the visitor.
• The request appears on the Requests tab. The tab shows how many are open and turns red when one is late, and the Overview lists waiting requests too.

Your deadline: 15 business days

California gives you 15 business days to act on an opt-out, and doesn’t allow you to ask for ID. GoConsent counts Monday to Friday in your site’s time zone. It doesn’t know your public holidays, so treat the date shown as the latest you should act.

The days-left label turns amber when 3 business days or fewer are left, and red once the request is overdue. GoConsent also emails you one reminder when 3 business days or fewer are left.

What to do

The checklist on the Requests tab and in the email walks you through it:

1. Find the person by email everywhere you keep their information: your email list, contact form entries, customer records, and any lists you upload to ad platforms (such as Meta Custom Audiences or Google Customer Match) or share with partners.
2. Stop selling or sharing their information: remove them from ad-platform uploads and stop passing their details to partners.
3. If you sold or shared their information after the request arrived, tell those companies to stop too.
4. Click Mark done. If you don’t sell or share information outside your website, click Nothing to do instead.

Records

Closed requests stay on the list as “Done” or “Closed: nothing to do”, so you can show when and how each one was handled. Records are kept 24 months, then deleted automatically. The form also has simple spam protection, so bots don’t fill your list.

With GoConsent Pro, visitors can also ask for a copy of their information or for it to be deleted. See Copy and delete requests. For what visitors see, see Your Privacy Choices.