How do I file a GDPR data subject request with Valid Email Checker?

GDPR gives EU residents (and any user whose data is processed by Valid Email Checker, since our practice is to honor the same rights globally) a set of formal rights over their personal data. You can request access to what we hold, rectification of anything inaccurate, erasure of all of it, portability into a machine-readable bundle, or restriction of processing. Filing the request is the same process for all five rights: a single email to support, then identity confirmation, then we complete the request within the 30-day GDPR window. Most are done in under a week.

The rights you can exercise

• Access (Art. 15) — get a copy of what we hold about you. We deliver this as the full account export bundle.
• Rectification (Art. 16) — correct inaccurate data. Most fields are self-serve in Account Settings; reach out for fields the UI does not expose.
• Erasure (Art. 17) — the right to be forgotten. We purge your verification data, login history, integration tokens, and account profile. Billing records are retained where law requires.
• Portability (Art. 20) — receive your data in a structured, commonly-used format. Same bundle as access, delivered as JSON and CSV.
• Restriction (Art. 18) — limit processing while a dispute is open. We pause integrations and stop new verifications against your tenant without deleting anything.
• Objection (Art. 21) — object to specific processing. Mention which processing you object to in the email.

How to file

1. Email support@validemailchecker.com from the address on your account.
2. In the subject line, write "GDPR DSR: <right>" — e.g. "GDPR DSR: Erasure".
3. In the body, say which right you are exercising, the scope (whole account, specific data, a single subscriber whose address you handed us), and any context that helps. Include the email associated with your VEC account explicitly.
4. We reply within one business day acknowledging receipt and confirming the next steps.
5. We confirm your identity. If you email from the account address this is usually enough; for high-risk requests (full erasure on an enterprise account) we may add a second factor.
6. We complete the request and send confirmation, including a description of what was done and any data that had to be retained for legal reasons.

Timing and what to expect

GDPR allows 30 days to respond. In practice, simple requests (export, single-record erasure) complete in two to three business days. Complex requests (full account purge on an account with many integrations and a long Credits History) can take up to a week. We will always acknowledge inside one business day so you know the request is being worked on. If we ever need to extend (rare, but allowed by GDPR for genuinely complex cases), we will write to you with the reason and a new completion date.

Requests for third-party data subjects

If you are a Valid Email Checker customer and one of your subscribers has asked you to erase their address from your records, you can handle most of that yourself: use the per-row delete in Uploads & Results to scrub the address from any active verification task. If the same subscriber asks you to confirm we never retained their address independently, email support — we can confirm in writing that VEC holds your subscribers' addresses only as part of your verification tasks, governed by your retention policy.