GDPR - Your Compliance

Everyone who uses your site has a right to know what data you're collecting about them and how you use it. Even if you're not collecting Names or Email Addresses via a form, if you have any tracking tools on your website (Google Analytics) then you are collecting data.

The best way to provide the information about what data you collect and how you use it is with a Privacy Policy. Most clients include it as a PDF download within their websites footer.

Read more about what your Privacy Policy should include here

We strongly recommend all clients read our FAQ’s page and include in their Privacy Policy how they collect, store and use their clients data via the website. For example, if you have a contact form on your website you should state how the form submissions are sent (via email) and if they are encrypted or not (with SSL or without SSL).

From May 25th, 2018 potential customers (enquiries on your website) should have the option to opt in to receive marketing materials. You shouldn't assume that you have consent to store their data and use it in the future and you can no longer hide your data policies in your terms or Privacy Policy.

Consent fields should be unticked as default, allowing users to opt in should they wish.

In the case of texts, emails, post or calls, the user should be able to give specific consent to receive marketing by each of those means.

As well as collecting consent for marketing materials, you shoud also have a record of when the person gave you permission. If you use a Toolkit Contact form, the data will be stored in the Enquiries Module of The Toolkit and you'll have received an email notification when the form was submitted.

4 Must Do's When Collecting Data

1. Request the consent of all customers/potential customers before you collect any of their information. These requests must be in easily understandable language free of legal jargon and must also be obtained separately (tick box is recommended) from other matters and not be hidden in other text.
2. Have a clear and accessible Privacy Policy (as per above) that informs users how their data will be stored and used by yourselves.
3. Offer customers the chance to request a full log of all information you hold on them. We recommend including this in your Privacy Policy and stating any admin costs or the process involved to apply for information. It's important all customers to have a means to request access and view the data you have collected on them.
4. Provide users with a way to withdraw from your future correspondence and have all data on them purged on your systems. All users have a "Right to Be Forgotten”under the new rules.

Read More about Consent here

You are responsible for (but not limited to):

• The client data your website collects
• The content on your website (including any form disclaimers)
• The persons who have access to The Toolkit and subsequently your account with us
• How your client data is stored and managed
• How your mailing lists and contact lists are collected, stored and used

We are happy to answer any GDPR based questions that are not already listed on our FAQ's page so if there is anything you're unsure of please don't hesitate to get in touch.