When a person asks you to delete their own data, a right that data protection laws give them, you need to find everything they answered across every form and delete it at once, without relying on memory of where they filled something in. That is what the Data subject deletion request is for. At ClÃnica Vitta, in Miami, client Mary Smith wrote asking for deletion; Dr. Helen handled it in two minutes.
Where it is and who can use it
Settings › Privacy, "Data subject deletion request" card. Only the account owner sees this tab and handles requests.
1. Search
In Data subject's email or ID document, type the data the person gave in the forms and click Search. Dr. Helen searched for mary@example.com; she could have searched by her passport number instead.
- The search goes through every form in the account, including responses in the trash and incomplete responses, and also what the person saved with "Save and continue later" without submitting.
- Email is found in email fields.
- ID document is found in document fields, with or without punctuation: X-000.000 and X000000 give the same result. Documents from any country work.
- A text field whose entire answer is the data also counts, in case you asked for the email in a "short text".
- Data written in the middle of a longer text ("my email is mary@…") does not count, nor do the same digits in a phone field. If you suspect the person wrote the data inside a comment, check those responses by hand.
2. Check what was found
"What we found for mary@example.com" shows up, with Form, Type and Date. The type tells where each item comes from: Response, In trash or Incomplete. The form name is a link, so you can open it and check before deleting. In Mary's case: the intake form, an old "Book your consultation" response already in the trash, and one incomplete response.
If nothing shows up, the message is "No response in this account has that email or ID document" — and you can tell the person exactly that.
3. Delete permanently
Click Delete this data subject's data. The confirmation says how many responses and incomplete responses will be deleted, along with signatures and consent records; confirm with Delete permanently. Deletion is permanent and does not go through the trash. When it finishes, the dashboard shows how many items were removed.
What has already left WiseData Forms is not deleted here: a row in a Google spreadsheet linked to the form, a webhook delivery to your system, an exported file on your computer or a response alert email. Those copies are your responsibility; delete them too to fully meet the request.
What is recorded
The search and the deletion show in Logs, in the Privacy category: one record for the search, with how many records were found, and one for the deletion, with how many responses and incomplete ones were removed. The record keeps who did it, when and whether it was by email or ID document, never the email or document itself. It is your proof the request was met, without keeping the data the person asked you to delete.
Where to go next
- Response retention (Security and privacy collection) — so responses leave on their own after a while.
- Google Sheets and Webhooks (Integrations collection) — where the copies you delete yourself live.
- Logs (Security and privacy collection) — the record of each request handled.
In short: in Settings › Privacy, the owner searches by the data subject's email or ID document across every form, including the trash, incomplete responses and "Save and continue later", checks the list and deletes everything permanently, with signatures and consent records; copies in spreadsheets, webhooks and exports are up to you, and Logs record the request without keeping the data.