News & views
News, views and top tips
Clients and prospects must actively opt in to communications, for example by ticking a box which agrees to a clear and specific Consent requests should be kept separate from other terms and conditions.
Ask your existing database
You’ll need to ask your existing contacts whether they are happy to continue receiving marketing updates. They may have already agreed, if they have specifically opted in.
But those who are contacted purely because they have given you their details or use your service, but haven’t agreed to marketing updates, will need to do so before you can contact them post-GDPR.
Are you contacting a customer with information essential to your service?
Though you CAN’T contact customers who haven’t opted in for marketing purposes, you CAN communicate details which are essential to the service you’re providing to them.
Make it clear that individuals can refuse or withdraw consent
Requests for consent should use plain language, and should explain:
– Why you want the data and what you will do with it
– The name of your organisation and any third party controllers
– That individuals can refuse consent without it affecting their service
– That individuals can withdraw their consent in future, and how to do this
If you are unsure about any of these points, always refer to official guidance from the Information Commissioner’s Office (ico.org.uk).