Does unsubscribing mean data deletion?

Someone hits unsubscribe on your email. Does that mean you have to delete everything you know about them? Short answer: no. But it's worth understanding why, because the two things are genuinely different.

Unsubscribing is a marketing opt-out. It tells you "stop sending me emails." That's it. You still have their data (name, email address, purchase history, whatever you've collected), you just can't use it to send them marketing anymore. In fact, you often need to keep their email address on a suppression list so you don't accidentally email them again.

Data deletion is a separate request entirely. Under GDPR (and similar laws like CASL or US state privacy laws), people have what's called a "right to erasure." That means they can ask you to delete their personal data from your systems. This is a distinct action that someone has to specifically request. It doesn't happen automatically when they unsubscribe.

So the two can happen independently. Someone might unsubscribe but never ask for deletion (common). Someone might ask for deletion without ever having unsubscribed (less common, but it happens). And someone might request both at the same time.

If you receive a data deletion request, you do need to take it seriously. Most privacy laws give you a window (30 days under GDPR) to respond and act. You'd typically remove their data from your ESP, your CRM, your database, and any third-party tools you use. The one thing worth knowing: if you delete everything, you lose the record that they asked you not to email them. Some companies keep a minimal "do not contact" record even after a deletion to protect themselves from accidentally emailing that person again later.

If you're unsure how GDPR compares to other compliance frameworks you might be subject to, that's worth a separate look. And if a subscriber asks you to re-add them after unsubscribing, that's its own question with its own answer.