Personal data requests in CDP: export, delete, consent records
Answer a person's request for their data — find them, export everything CDP holds about them, delete it for good — and read the consent records and the GDPR log.
When a person asks what you hold about them, or asks you to delete it, CDP has the tools in Configure → GDPR — the page GDPR Compliance. This page covers the data in CDP; other Monfri services keep their own records — a contact in CRM, a subscriber in Push.
Who can do it
- Export — an owner or admin of the workspace, or a member with the permission Can run GDPR export — see What each person can open: service access.
- Delete — only an owner of the workspace.
Find the person
On Overview, under Profile Lookup — Search for a profile to export or delete their data. — type an e-mail, a name or a user ID in Search by email, name, or user ID... and choose the person. View Profile opens their profile, to check you have the right one.
Export their data
Click Export Data. The request is queued — Data export request has been queued. You will be notified when ready. — and a file with everything CDP holds about the person is prepared in the background: their profile, traits, events, consent and segment memberships.
Find it in the Data Exports tab: Pending, Processing, Completed — then download it — Failed or Expired. A file can be downloaded for 7 days; after that, request it again. Send it to the person by a secure channel.
Delete their data
Click Delete Data, read This is irreversible! and click Confirm Delete. CDP deletes the person's profile, their events and everything derived from them. It cannot be undone, and an export is impossible afterwards — export first if the person also asked for a copy.
If the person keeps visiting your site, the script starts a new, anonymous profile; it is not linked to the deleted one.
Consent records
The Consent Records tab lists every consent decision: the Purpose — Analytics, Marketing, Personalization, Functional — the Status — Granted or Revoked — the IP Address and the Date. Search by profile e-mail, name or ID, and filter by status and purpose. This is your proof of what a person agreed to and when.
Overview sums it up: Profiles with consent, Analytics consent granted, Marketing consent granted, Total consent changes, and Consent by Purpose.
The GDPR audit log
The Audit Log tab records every consent change, export and deletion — Consent Updated, Export Requested, Export Completed, Deletion Requested, Deletion Completed — with the profile, who did it and when. Details shows the rest.
Good to know
- You have one month to answer a person's request; the date you received it matters, so note it.
- Deleting in CDP does not delete the person from CRM, Push or your store. Do it there too, or delete the whole workspace — see Cancel, export everything, delete a workspace or your account.
- Requests about Monfri's own handling of personal data go to [email protected].
If something doesn't work
Exporting personal data needs a workspace admin, or the "Can run GDPR export" permission in Monfri.
You are a member without the permission. Ask an owner or admin.
Super-admin access required
Only an owner of the workspace can delete a person's data. Ask an owner.
The person is not found
Search by the exact e-mail. If they never identified themselves on your site and are not a customer of your store, CDP holds only anonymous data about them, which cannot be linked to their name.