Product / Customer data requests

Answer every request about personal data on time, and on record.

Customers can ask to see, correct, delete or move the data you hold about them, and the NDPA expects you to respond without unreasonable delay. Izini opens a case for each request, checks who is asking and reminds you before it runs late.

The data subject rights register: each request with its type, channel, identity check and time remaining.

Nothing gets lost

Requests from your banner, website, email and systems all land in one register.

The right person gets the data

An identity check comes before anything is released.

You can show what you did

Each case keeps a full history for complaints and your annual audit.

How it works

What your team gets

GAID 2025

Resolve complaints before they reach the regulator

A desk for privacy complaints, with ready-made scenarios and a record of how each one was handled. Many complaints end here instead of at the NDPC.

The grievance desk with intake, investigation and closed stages and ready-made complaint scenarios.
Also included

Everything else in customer data requests

NDPA s.34s.38

Request register

Requests to see, correct, delete or move personal data land in one register with an identity check, a due date and a full history.

Requests from any channel

Requests can come from your cookie banner, your website, email or your own systems, and all of them open a case in the same register.

Where the data lives

Connect the systems that hold customer data, so each request shows your team where to look and what to remove.

For your DPO

How it maps to the law

What the NDPA asks of you in this area, and the evidence Izini keeps for each requirement.

What the law asksWhere it comes fromWhat Izini keeps for you
Give people access to their data, and correct or delete it
NDPA s.34
The request, the identity check and the response
Let people take their data elsewhere
NDPA s.38
Portability requests in the same register
Respond without unreasonable delay
NDPA s.34
Dates for every step, tracked against a 30-day target

The NDPA does not set a fixed number of days for a response. Izini's 30-day target is an internal benchmark you can show as evidence of a prompt reply.

See where your business stands

In a 30-minute demo we look at your own website, show you what the NDPA expects of an organisation like yours, and answer your questions about setup and price.

  • A walk through Izini using your own website
  • A cookie scan of your site, yours to keep
  • Straight answers on scope, timelines and pricing
Book a demoChat on WhatsAppWe reply within one business day.