Recording Consent and Legal Basis for Processing Personal Data

Disclaimer: This article provides informational guidance only and does not constitute legal advice. You should consult with your own legal counsel to ensure compliance with applicable data protection laws.

Understanding Personal Data

Personal data refers to any information that relates to an identified or identifiable individual. Before collecting this information, it is essential to have a lawful basis for processing it.

Where Consent is Typically Collected

You can obtain a contact's consent to process their data at several points of interaction within the CRM. Common locations include:

• Forms, including those embedded on websites or funnels
• Surveys, including those embedded on websites or funnels
• Webchat conversations
• Scheduling calendars, including those embedded in funnels or websites
• Order forms embedded in funnels or websites

A prerequisite for obtaining valid consent is that your privacy policy must be readily available to the contact at the time their data is collected.

Tracking Legal Basis Without Express Consent

In some cases, you may process personal data based on a legal basis other than explicit consent. To keep a clear record of this for specific contacts, you can use the tagging system within the CRM.

Create a dedicated tag (for example, "Legal Basis - Legitimate Interest") and apply it to the relevant contacts. This can be done manually on a contact's profile or automatically by setting up a workflow that applies the tag based on specific triggers or conditions.