Data Principal Rights
How a person asks for their data, and how your team handles that request.
Two sides
The person uses a public form on complydp.com. Your team uses Data Principal Rights in the dashboard. The form is tied to a consent site, so the request lands on the entity that owns that site.
What a person can ask for
- Get a copy of my data
- Correct my data
- Delete my data
- Transfer my data
- Who has my data been shared with?
What the person does
- They open the request link for your site. It includes your site id.
- They choose a request type, and enter their name and email. A note is optional.
- They confirm the email from the message ComplyDP sends. Until they do, the request stays at Awaiting your email confirmation.
- They can return to a status link to see progress. When a copy is ready, the status page tells them it can be downloaded.
https://www.complydp.com/privacy-request?site_id=YOUR_SITE_IDFooter markup
The data-complydp-dsar attribute is what the banner looks for. Keep the href as the fallback when the banner script has not run.
<footer>
<a data-complydp-dsar
href="https://www.complydp.com/privacy-request?site_id=YOUR_SITE_ID">
Manage my data
</a>
</footer>export function ManageMyData({ siteId }: { siteId: string }) {
const href =
"https://www.complydp.com/privacy-request?site_id=" +
encodeURIComponent(siteId)
return (
<a data-complydp-dsar href={href}>
Manage my data
</a>
)
}<footer>
<a data-complydp-dsar
href="https://www.complydp.com/privacy-request?site_id=YOUR_SITE_ID">
Manage my data
</a>
</footer>How you publish the link
On Consent Manager → Install, open Privacy requests and copy the footer tag. That tag is the durable link in your site footer. The banner can also show a request path while its preferences panel is open. The rights-notice block on the same page is wording for your privacy policy. Turn Privacy requests on so those paths match.
On Shopify, add the Privacy request link block to the footer in the theme editor. It stays hidden until the ComplyDP consent banner app embed is enabled.
What your team does
Open Data Principal Rights. The list is every request for this entity. Open one to see the person, the type, the due date, and the audit trail.
- Submitted: the form was received.
- Awaiting your email confirmation: the person has not confirmed the email yet.
- Being reviewed: your team is working on it. You can assign it and mark tasks done.
- Ready: a copy or report is available for the person to download. Upload that file from the request before you mark it ready.
- Completed: the request is finished.
- Declined: you rejected it and recorded a reason. The person sees that it was declined.
What this portal does not do
The portal records the request and the file you upload. It does not search your Shopify store, WordPress database, or other systems and pull the person’s data out for you. Your team gathers the data, uploads the export or the sharing report, and then marks the request ready or completed.