Can I really make a company delete data about me?

In many cases, yes. The Right to Erasure (sometimes called the right to be forgotten) is part of UK GDPR. There are exceptions (for example if a company has a legal reason to keep some data), but most platforms have a form to start the process.

Do I have privacy rights if I am under 18?

Yes. The Age Appropriate Design Code specifically protects under-18s, and many of your data rights apply from birth. The ICO actually treats children's data with extra care.

Is it worth changing privacy settings if everyone can already see my posts?

Yes. Locking things down now stops the situation getting worse and limits who can find new content. It will not undo what is already out there, but it does change what happens next, which matters more than you might think.

Your privacy and personal data

What privacy rights you actually have under UK data protection law, including the right to ask for your data back or have it deleted.

Under UK data protection law (UK GDPR and the Data Protection Act 2018), you have real rights over information about you, even when you are under 18. Companies that hold your data have to be honest about what they have, what they use it for, and who they share it with. You can ask to see it, ask for it to be corrected if it is wrong, and in many cases ask for it to be deleted. The Information Commissioner's Office (ICO) is the UK regulator that handles complaints when companies will not play fair.

Privacy is not just an abstract idea. It is the difference between a company holding your location history quietly and you knowing about it and being able to say no. Children and young people get extra protection under the Age Appropriate Design Code, which is why so many apps changed how they work for under-18 accounts.

What this looks like in real life

Real examples

An app keeps showing ads that feel like they are based on private things you searched for.
You want to delete an old social account and the platform is making it hard.
A platform changed its settings and your posts that used to be private are now showing publicly.
Someone you do not know shows up in your suggested friends with worrying information about you.

What you can do

Step 1

Read your account's privacy settings end to end. Default settings are often more open than you would choose.

Step 2

Use 'download your data' on big platforms (Instagram, TikTok, Google) to see what they actually have.

Step 3

Ask a company to delete your data using a Right to Erasure request. Most platforms have a privacy form for this.

Step 4

Lock down location sharing, microphone access, and contact-list access in your phone settings.

Step 5

Use a strong, unique password and two-factor authentication on accounts that matter.

Step 6

Report concerns to the ICO if a company will not respond properly to your data request.

What not to do

Do not click 'accept all' on every cookie banner without thinking. You can usually pick 'reject all'.
Do not reuse the same password across apps. One leaked password becomes every account.
Do not assume incognito mode hides you from the apps themselves. It only hides things from the local device.

Who you can talk to

People who can help

A parent, carer, or older relative who can help you fill out forms.
A teacher or IT lead at school if it involves a school account or device.
Childline on 0800 1111 if the privacy issue is tied to bullying or harassment.
The ICO directly if a company is refusing to handle your data properly.

If something goes wrong

If something private has leaked, do not panic. Change your password on that platform and any account where you used the same one. Tell a trusted adult, screenshot what is exposed, and use the platform's report tool. If the leak involves intimate images, use Report Remove. If a company will not act on a data request, you can complain to the ICO, which is free.

Frequently Asked Questions

Trusted UK sources

Your data matters (young people) (ICO)
Age Appropriate Design Code (ICO)
Online privacy advice for young people (Childline)

Last reviewed: 2026-05-20Next review: 2026-08-20Reviewed against: UK statutory guidance

This is practical educational content to support families. For case-specific concerns about a child's safety, contact the NSPCC helpline on 0808 800 5000 or your local safeguarding team.