Consent & Privacy (GDPR)
Veribl provides built-in tools for managing consumer consent and maintaining GDPR compliance.
How consent is collected
During product registration, consumers can opt in to email marketing communications:
- The registration form includes a marketing consent checkbox
- Consent is not pre-checked — consumers must actively opt in
- When they consent, Veribl records:
- Consent status — opted in or not
- Consent timestamp — when they opted in
- IP address — for record-keeping
Consent indicators
In the Customers > Contacts tab, each contact shows their consent status:
- Opted in — the consumer agreed to receive marketing emails
- Not opted in — the consumer did not check the consent box
- Unsubscribed — the consumer was opted in but later unsubscribed
Unsubscribe flow
Every marketing email includes an unsubscribe link in the footer:
- Consumer clicks the unsubscribe link
- They see a confirmation page
- Their consent status is updated to "unsubscribed"
- No further marketing emails are sent
- A
consumer.unsubscribedwebhook event is triggered (if configured)
Unsubscribe links use HMAC tokens to prevent tampering.
Transactional vs marketing emails
- Transactional emails (e.g., Warranty Confirmation) are sent regardless of marketing consent — they're related to an action the consumer took
- Marketing emails (e.g., Product Tips, Review Request, Accessory Recommendation) are only sent to consumers who opted in
GDPR compliance features
Veribl supports GDPR compliance with:
- Explicit opt-in — no pre-checked consent boxes
- Consent records — timestamp and IP address stored for each consent
- Easy unsubscribe — one-click unsubscribe in every marketing email
- Data export — export all consumer data as CSV
- Consent filtering — filter contacts by consent status
Tip: Review your consent records regularly. The Contacts tab lets you filter by consent status to understand your marketable audience size.
Related
- Contacts & Customer Data — viewing consent status
- Email Automations — how consent affects email delivery
- Exporting Customer Data — exporting consent records