Your Letter of Authorisation, explained
What it is
The Letter of Authorisation (LOA) is a short letter in which you authorise nordic17 to act as your agent and ask data brokers, people-search sites and public directories to delete, block or correct your personal data. You sign it once in the app, after payment. The letter is in English, because it goes to data brokers in many countries.
Why we need it
Under the GDPR, you can ask a company to delete your data, and you can let someone else make that request for you. A broker that gets a request from us can ask for proof that you authorised it. The LOA is that proof. Without it many brokers would refuse, or contact you to confirm first.
What it says
- your full name, as you entered it;
- that nordic17 may act as your agent to request removal, suppression or correction of your personal data held by data brokers, people-search and public directory services;
- that the authorisation runs from the day you sign until you revoke it, or a later letter replaces it;
- your confirmation that you are the person named and want to give the authorisation (required);
- your choice on services outside the EU/EEA (optional, see below);
- the signing details: when you confirmed your email address, when you signed, the IP address and browser you signed from, and a document number. Your email address is not printed on the letter.
- for a child: the letter is in the child's name, and the parent signs it as legal guardian.
How you sign
You read the letter in the app, tick the required box, and confirm. Your identity evidence is that you confirmed your email address before signing. The IP address and browser details from the moment of signing are printed on the letter as evidence; since the letter goes to data brokers, they see them too.
Who sees it
- Data brokers we email a removal request to receive the signed letter as a PDF attachment. Web forms get no letter.
- nordic17 staff who handle removal cases.
- You can download your signed letter at any time under Account Settings.
Services outside the EU/EEA
Some data brokers are in countries without EU-level data protection, and are not covered by the EU–US Data Privacy Framework or Standard Contractual Clauses. Sending them a request means sending your name and email address to such a country, where your data may have less protection. We contact them only if you tick the optional box on the letter. You can sign without it; we then leave those brokers out.
How to revoke it
- In Account Settings, "Revoke the letter": from then on we send no new requests and no follow-ups. Your subscription keeps running (cancel it separately if you want to stop paying), and you can sign the letter again at any time to continue.
- Delete your account: this stops all requests and revokes the letter.
Requests already sent stay with the brokers, who must still answer them.
How long it is kept
For as long as you are a customer, also after it was revoked or replaced, and 180 days after your account is deleted, as evidence in case a broker or you dispute that you authorised a request. Then it is deleted automatically.