Veribl logo

Consent & Privacy (GDPR)

Veribl provides built-in tools for managing consumer consent and maintaining GDPR compliance.

During product registration, consumers can opt in to email marketing communications:

  1. The registration form includes a marketing consent checkbox
  2. Consent is not pre-checked — consumers must actively opt in
  3. When they consent, Veribl records:
    • Consent status — opted in or not
    • Consent timestamp — when they opted in
    • IP address — for record-keeping

In the Customers > Contacts tab, each contact shows their consent status:

  • Opted in — the consumer agreed to receive marketing emails
  • Not opted in — the consumer did not check the consent box
  • Unsubscribed — the consumer was opted in but later unsubscribed

Unsubscribe flow

Every marketing email includes an unsubscribe link in the footer:

  1. Consumer clicks the unsubscribe link
  2. They see a confirmation page
  3. Their consent status is updated to "unsubscribed"
  4. No further marketing emails are sent
  5. A consumer.unsubscribed webhook event is triggered (if configured)

Unsubscribe links use HMAC tokens to prevent tampering.

Transactional vs marketing emails

  • Transactional emails (e.g., Warranty Confirmation) are sent regardless of marketing consent — they're related to an action the consumer took
  • Marketing emails (e.g., Product Tips, Review Request, Accessory Recommendation) are only sent to consumers who opted in

GDPR compliance features

Veribl supports GDPR compliance with:

  • Explicit opt-in — no pre-checked consent boxes
  • Consent records — timestamp and IP address stored for each consent
  • Easy unsubscribe — one-click unsubscribe in every marketing email
  • Data export — export all consumer data as CSV
  • Consent filtering — filter contacts by consent status

Tip: Review your consent records regularly. The Contacts tab lets you filter by consent status to understand your marketable audience size.