Help › Contacts

GDPR and consent

For the people on your list, you are the controller and we are your processor. Our GDPR page has the data processing terms; you accept them with our terms, with nothing else to sign.

Consent boxes on every sign-up form

1. Open Forms and press GDPR consent on a form.
2. Choose A box they must tick (best for the UK and EU) or A sentence under the button.
3. Write your words, or leave the box empty for the standard words. Say who you are and what you will send.
4. Paste the link to your privacy policy.
5. Add up to 3 extra boxes if people can choose what they get, each with a tag. For example "Send me the daily deals", tag daily deals. Then send the daily deals only to that tag.
6. Press Save consent settings. Copy the HTML form again if it is on your website.

Proof of consent

Each new contact keeps the words they agreed to, the extra boxes they ticked, the form, the page and the time. It shows on their contact page under Lawful basis. A sign-up from another tool (for example Typeform) says so: that tool showed its own words.

The rest of the law

• Each contact needs a lawful basis. A campaign does not go while anybody in the audience has none.
• Confirmed opt-in makes new people confirm by email first.
• Every email has an unsubscribe link and your company details.

When a person asks about their data

• See it: on their contact page, press Download this person's data. Send them the file.
• Correct it: change it on their contact page.
• Stop emails: press Unsubscribe on their page. They stay unsubscribed after any import.
• Delete it: press Delete this person at the foot of their page (owners and admins). Keep Never add this address again ticked: an import, the API or Claude then skips the address. We keep only a one-way code of it. If the person signs up again through one of your forms, that is new consent and they are added.

Take your data with you

On Subscribers, press Download contacts (CSV) (owners and admins). It has every contact that matches the filter, with status, lawful basis, the consent record and the words agreed to, engagement stars and dates. Every owner and admin gets an alert when somebody downloads the list.