Privacy policy

Privacy policy

opt in or out, it's up to you. 

GDPR

The GDPR is a privacy and security law passed in the EU. It affects companies outside of the EU, so long as they target or collect data related to people there.

The GDPR protects your customer's personal information from mishandling by businesses collecting private data. Personal Data under the GDPR refers to any piece of information that could be used personally (e.g., name, I.D. numbers, location details), which can identify someone either on its own or when put together with other pieces of data (like their website browsing history or email address).

However, the regulation covers more than just email addresses. It applies to all types of electronic communication.

With that said, email marketers have to understand that they must abide by super strict consent requirements if they're doing business within the E.U.

The GDPR states that any consent given must be "clear, affirmative actions." In other words, your subscribers only consent when they take a positive action, such as clicking an appropriately worded link or ticking a box.

You must also pay particular attention to your data processing efforts since you can only collect email addresses when the following criteria are met:

You must have a specific and lawful reason for processing personal information

You must only use personal information for the reasons you state within your Privacy Policy

You must provide a way for subscribers to update and remove inaccurate or outdated information, and

You must delete personal information when you no longer need it

Each of these issues needs to be covered in your GDPR Privacy Policy, and you must actively manage any email subscription lists you have.

You also have to remember that the GDPR gives your subscribers the right to object to you processing (using) their personal data. That means even if they've already provided you with consent, such as filling out a form and providing you with their email address, they have the right to withdraw that consent at any time.

You have to let them know they have that right and ensure that you're able to provide them with any data you've collected as well as a means for them to ask you to stop using it.

Most websites collect email addresses through web forms.

These web forms should have two main components to them: a form of clickwrap, and a link to your Privacy Policy.