HelloForms
Consent · free template

GDPR Consent & Data Request Form

Capture marketing consent and handle data subject access requests.

Questions
21
Pages
4
Layouts
classic
Conditional rules
3
Preview it in the gallery

Searches this template answers

About this template

Data protection work splits into two jobs: recording consent properly and responding to requests within the statutory window. This form does both. The consent section asks the individual to opt in by channel — email, text, phone and post — and by purpose, so marketing, service updates and research are agreed separately rather than bundled into one tick box. Each choice is recorded with a timestamp, which is what a regulator asks to see. The request section lets the same person exercise their rights: access to their data, rectification, erasure, restriction of processing, portability, or objection to processing, with a description of what they are asking for and the date range involved. Identity verification is handled with an upload field, and requests made on someone else's behalf require confirmation of authority. The individual chooses how they want to receive a response and confirms the statutory response period has been explained. Because everything arrives as one structured record, your data protection lead can log and evidence each case immediately.

What this form asks

Every question is editable — rename it, make it optional, or delete it entirely.

Page 1 — About you

  • Full namerequired
  • Email addressrequired
  • Contact number
  • Address
  • What are you doing today?required
  • Are you acting on behalf of someone else?required
  • Whose data is this, and what is your authority?

Page 2 — Consent preferences

  • Contact me byrequired
  • You may contact me aboutrequired
  • May we share your details with partners?required
  • How did we obtain your details?

Page 3 — Your request

  • Which right are you exercising?
  • Describe what you are requesting
  • Which data would you like erased, and why?
  • Data from (date)
  • Data to (date)
  • Preferred response formatrequired
  • Proof of identity

Page 4 — Declaration

  • Agreementrequired
  • Signaturerequired
  • Daterequired

21 questions in total.

Conditional logic included

  • When “What are you doing today?” is Making a data request, show “Which right are you exercising?”.
  • When “Are you acting on behalf of someone else?” is Yes, require “Whose data is this, and what is your authority?”.
  • When “Which right are you exercising?” is Erasure, require “Which data would you like erased, and why?”.

Works in this layout

Browse classic templates

Frequently asked questions

Does this replace a privacy policy?
No — it records consent and requests. Link your privacy notice from the form so people can read how their data is used.
Is the consent record defensible?
Each submission stores the exact options chosen with a timestamp, which is what evidencing consent requires.
How do we meet the response deadline?
Route request submissions to your data protection lead immediately and use the submission date as the clock start.
Can we use it for erasure requests?
Yes — selecting erasure reveals a required question about which data is involved so the request is actionable.

Related templates

All Consent, Waivers & Releases templates