Right to Be Forgotten
The Right to Be Forgotten generally relates to online search results that are in the public domain but it does extend to individuals having the right to request that some or all of the data stored about them is removed.
Where an individual wants to view all of the information stored about them they may make a Subject Access Request.
Suppression
When individuals unsubscribe or complain the default action is to set opt-out and therefore suppress their email address from that point forward.
If this option is not sufficient then consider using the options below.
Deleting Individual Users
Where an individual User record has been created but has no related activity in the application (emails, Automation, Forms etc.) they can be deleted completely through the delete option in the User details screen.
Erase Personally Identifiable Information
In scenarios where there is activity relating to an individual User and they have made a request to be forgotten the information cannot simply be deleted. The related records are required for the integrity of how the data is stored and used for display in features such as Campaigns, Automation and Forms.
Instead of deletion, it is possible to erase all personally identifiable information and to permanently suppress the related email address.
An encrypted version of the email address will be stored in the Realtime Block List to ensure the individuals data does not enter the application at any time in the future - the encrypted suppression can be removed manually through the web interface if required.
There are a number of ways to erase personally identifiable information for an individual User:
- On the User details screen (following a User search)
- Through the User details API endpoint
- Send an email to support
Common Questions
What is GDPR?
The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) is a regulation by which the European Parliament, the Council of the European Union and the European Commission intend to strengthen and unify data protection for all individuals within the European Union (EU). For more info, click here.
How can legal compliancy be ensured?
First, read the application Terms of Use and then research the many different types of worldwide legislation to review how each law impacts on the data you store and the emails you send.
What is double opt-in?
Double opt-in is a way to validate email addresses as people complete forms (signup, register etc.). Before being added to a List the User must first click the link on the email sent to their inbox. To find out more about double opt-in, click here.
What is a "Subject Access Request"?
An individual is entitled to obtain all of the information stored about them and this is commonly termed as a 'Subject Access Request'. For more info on how to deal with this type of request, click here.
What is the "Right to Be Forgotten"?
When an individual no longer wants their information to be stored they are able to exercise their right to be forgotten. Users can opt-out at any time but this goes a step further and removes all personally identifiable information relating to them. For more info on how to deal with this type of request, click here.