Are you GDPR compliant?

If you are collecting data from your customers in any way (emails, purchases etc) listen up...

You’ll need to ask your contacts if it’s OK to process their personal data and handle it in the right way!

Let's dig in a bit deeper in this THREAD

So what is GDPR?

GDPR (General Data Protection Regulation) is Europe’s new privacy law that came into force on May 25, 2018.

It defines how your business needs to handle your data.

And marks the biggest change in data protection in 20 years.

This is especially important if you are working on building a list for #emailmarketing or other #onlinemarketing or #digitalmarketing purposes.

This applies to:
#influencers
#onlinebusiness
#websiteowners
#digitalassets
If you share #content in exchange for data

So what do you need to do?

In general you need to make sure that:

It’s OK to process your customer's personal data
It is easy for contacts to withdraw consent
You can easily remove them from the list if requested

Before collecting personal data, you need to tell the person:

Who you are and your contact details
Why and how you will use their data
If their personal data will be shared with anyone else
If you plan to transfer their data to a 3rd party and how they can access it

You also need to share:

How long you’ll keep their data
Their rights to access, update, or erase it
How to withdraw consent
How to lodge a complaint with a supervisory authority
Why you need their personal data.
How and if you will be processing it

So in easy steps, what does this mean?

You need to get the consent.

This is easiest done on the sign up form that you use when they sign up to your newsletter or as a check box in your cart or registration form.

It is also good to make sure you have a Privacy Policy

You need to prove you have their consent..

Make sure your email provider, website sign up forms or ecommerce platform have a way to clearly COLLECT and STORE this information!

You might need to find it later!

You need to offer the chance to be forgotten

This can be done by:

Unsubscribe button
Removing contacts from the list manually
Having your email/ecommerce platform provider remove them (check if they offer to do this first!)

And the right to object to you using it (e.g. publicly)

The right to correct or change their data

And to access their data

Make sure you tell them:

If their data is being used
How they can access it
Why it’s being used
Who it’s shared with
How long it will be stored

(Tip - Add all this to your Privacy Policy)

And that's it! Easy peasy!

Make sure you have at least these covered:

Unsubscribe button
Consent collection
Privacy policy on your website (or somewhere they can refer to)
Service providers who adhere to the rules!

And if in doubt, get professional help

If you want a great partner who does it right, check out GetResponse.

Professional service
User friendly platform
Great toolsets for emails, auto responders, forms, landing pages...

Here's my amazing affiliate link to get you going!
https://www.getresponse.com/?a=kTm7gfde3R