How to get customer consent or track legal basis to process your lead's or customer's personal data
How to Get Customer Consent or Track Legal Basis for Processing Personal Data
Disclaimer: This article is for informational purposes only and does not constitute legal advice. For guidance specific to your situation, consult with a qualified attorney.
What Is Personal Data?
Personal data refers to any information that relates to an identifiable individual. This includes details like name, email address, phone number, location data, or any other identifier that can be linked back to a specific person.
Where Personal Data Is Collected
Your CRM collects personal data through various tools and features, including:
- Funnels and websites
- Embedded forms
- Surveys
- Webchat interactions
- Calendar scheduling tools
- Order forms
Prerequisites for Data Collection
Before collecting personal data, ensure you meet these requirements:
- Display your privacy policy clearly at the point of data collection.
- Obtain explicit consent from the individual or establish a valid legal basis for processing their data.
How to Obtain Consent
You can gather consent through several methods within your CRM:
- Forms: Add consent checkboxes to forms embedded on your funnels or websites.
- Surveys: Include consent requests in surveys to ensure participants agree to data usage.
- Webchat: Use chat interactions to request and record consent during conversations.
- Calendars: Add consent prompts to scheduling tools when booking appointments.
- Order Forms: Integrate consent mechanisms into order or checkout processes.
Always ensure the consent request is clear, specific, and easy for users to understand.
Tracking Legal Basis Without Explicit Consent
If you process data based on a legal basis other than consent (e.g., legitimate interest or contractual necessity), you must track this within your CRM. Here’s how:
- Create a custom tag (e.g., "Legal Basis: Legitimate Interest") to label contacts.
- Apply this tag manually to relevant contacts or set up an automation to assign it based on specific triggers or actions.
- This helps maintain a clear record of your legal justification for processing personal data when consent isn’t explicitly given.