# Data, Privacy & GDPR

> Export a copy of your data or submit a request to delete your account and associated data.

The Data & Privacy section lets you exercise your rights under data protection law (including GDPR Article 17 and 20). You can download a copy of everything Caramel holds about your account, or submit a permanent deletion request.

Navigate to **Settings → Data & Privacy** or go to `?section=data-privacy`.

<!-- screenshot: settings/data-privacy-settings -->

## Export your data

Click **Export my data** to request a download of your account data. Caramel compiles the export and sends it to your registered email address when it is ready.

The export includes:

- Business profile and settings
- Customer records in your workspace
- Form submissions
- Campaign history
- Billing and invoice records

The page shows the date of your most recent export, if one has been generated.

> **Note:** Large workspaces may take a few minutes to compile. Check your inbox — the download link arrives by email.

## Delete your account

Click **Delete my account** to submit a permanent data deletion request.

Before deletion is processed:

1. A confirmation email is sent to your registered address.
2. An automated process anonymises or removes your data from Caramel's systems — including customer records, form submissions, and marketing history.
3. Your Stripe billing profile is removed.
4. Your login is permanently deleted.

Deletion is irreversible. Once completed, you cannot recover your workspace, customer data, or billing history.

> **Delete button is disabled?** If the button appears greyed out, a deletion request is already pending for your account. Check your inbox for the confirmation email; deletion runs automatically once confirmed.

## What is not deleted

Some records may be retained where required by law or for legal compliance:

- Anonymised aggregate analytics (no personally identifiable information)
- Records required by financial regulations (for example, invoice records may be retained for the statutory period required in your jurisdiction)

## Marketing preferences

The same page also includes options to manage your **marketing consent** and **push notification** preferences. These control whether Caramel sends you product news and in-app notifications — they are separate from the customer marketing campaigns you run through Caramel.

## Related

- [Close your workspace](./close-your-workspace) — pause or fully deactivate your business workspace
- [Settings overview](./index)