Reference

Your intake portal and tracking page

What requesters see on your branded portal, and what they can do without contacting you.

1 min readLast updated 17 July 2026

Your intake portal and tracking page

Your intake portal is the public, branded page where people submit privacy requests. It runs on your own subdomain (for example yourcompany.dsar.blankitt.com) and needs no login.

What the form collects

  • Who they are: name, email, and their relationship to you (customer, employee, former employee, job applicant, or other).
  • Where they live (UK, EU, US, or somewhere else), which determines the law and deadline that apply.
  • Which right they're exercising, from the request types you've enabled in Settings.
  • Optional details in their own words, so they can tell you exactly what they're after.
  • Confirmation that they've read your privacy notice. The link goes to the right regional notice for where they live.
  • Whether they're an authorised agent acting for someone else. Agent requests must upload proof of authority before you disclose anything.

Submitting sends a confirmation email with a verification link. Nothing starts until they click it, which protects you from junk submissions.

The tracking page

Every email a requester receives links to their tracking page, where they can:

  • See the request's status and deadline.
  • Upload identity or authority documents if you've asked for them.
  • Exchange secure messages with your team.
  • Withdraw the request while it's still open.
  • Appeal, if you've refused the request.
  • Leave feedback after delivery.

Because everything happens on the tracking page, requesters don't need to email you directly, and every interaction lands on the request record where your whole team can see it.