Brand your intake portal

Your intake portal is the public page where people submit privacy requests. It lives on your own subdomain (for example yourcompany.dsar.blankitt.com) and carries your branding, so requesters see your organisation, not ours.

Everything in this chapter happens in Settings, then Branding & intake.

Set your display name

The display name appears on the intake form, on the request tracking page, and in every email a requester receives. Use the name your customers know you by, not your registered legal entity, unless they're the same.

Choose the request types you accept

Tick the rights you want to offer on the form. For UK and EU requesters that's typically access, erasure, rectification, portability, restriction, and objection. If you serve California residents you can also enable the CCPA rights: know, delete, correct, opt out of sale or sharing, and limit use of sensitive information.

Only the types you enable appear on the form.

Link your privacy notices

Requesters must confirm they've read your privacy notice before submitting. You can set a different notice URL for UK, EU, and US requesters, and the form links the right one based on where the requester says they live. If you don't set one, a built-in generic notice page is shown instead, so the form always works.

Share the link

Once you're happy, link your intake portal from your website's privacy notice and footer. That's it: requests submitted there appear in your queue immediately.

Next

Before requests start arriving, map the systems that hold personal data and who owns each one.