GDPR compliance and updated legal Terms and Policies

[E-junkie_Guru]

The European Union (EU) is introducing a landmark regulation called the General Data Protection Regulation (GDPR) effective on the 25th of May, 2018. Making sure we are compliant, and in turn that the personal data of buyers are treated correctly, while continuing to provide a great customer experience has been an important focus for us. This new page explains more about the GDPR, its relevance to E-junkie's services and clients, and the steps we've taken for compliance with these new requirements:

What Is the GDPR and Why Does It Concern You?

In a nutshell, E-junkie's policies and practices are compliant with the GDPR. Accordingly, we will be able to remove/anonymize on demand any personal data we collect about our seller clientele and/or their buyers, and we have updated our Terms of Service and Privacy Policy and drafted a new End User Privacy Policy and Data Processing Addendum, which are posted here:

Terms Of Service

Privacy Policy

End User Privacy Policy

E-junkie Data Processing Addendum

[printnpractice]

Awesome!!

Thank you all!

Thank you for emailing this post.

[anthonyk]

I see the following two statements in the "What is GDPR" page:

1) We provide a simple way for you to additionally collect marketing consent during the checkout flow. We do this using GDPR compliant language permitting marketing updates and offers in the future. We will pass this consent information back to you in our Seller Admin panel.

2) Customers who previously opted-in to marketing consent, but did so in a manner which was not GDPR compliant (such as having the confirmation checkbox automatically checked) will have their marketing consent removed until they opt-in again.

Concerning item 1), I just did a purchase from my own website using the e-junkie shopping cart and did not see anything that asked me for marketing consent during the checkout flow. There was no "opt-in" feature that would seem to be required by GDPR.

Concerning item 2), I have used e-junkie extensively for contacting previous customers. Does this mean I will not be able to contact them anymore if they have not positively opted in to receive these messages from me? Normally, I just send updates to customers that have purchased from me. Do I need to contact these customers somehow to now be able to contact them again in the future. And if I can't contact them through e-junkie, like I did in the past, how will I contact them? Bottom line, is there a way for me to obtain their consent to receive future marketing information from me using e-junkie?

Overall, I don't see how e-junkie is allowing customers to opt-in to receive future communication during the checkout workflow or if there is a way to obtain consent from previous customers.

Please let me know your thoughts and status on these issues. Thanks.

[E-junkie_Monster]

Regarding point 1 - when using regular PayPal checkout there is no way for us to include an opt-in message during checkout itself since that all happens on PayPal's site. In the past these purchases were automatically passed to mailing lists but now we are including an opt-in box on the thank you page that shows after checkout.

The new thank you page layout is already showing that opt-in box, but after double checking I found that the classic layout was not including it as it should, so I've let our devs know to fix that. If you'd like to see what the new layout and opt-in looks like you can toggle it on at this page (while logged in):

E-junkie Admin

As for point 2, we are not erasing any previous mailing list entries so you will still be able to send newsletters to your buyers in order to confirm whether or not they wish to remain on your list, and you can then remove anyone afterwards as necessary. If you're using the list to provide product/content updates instead of marketing you could check to see if that would fall under the "legitimate interest" exception if your buyers are expecting those updates to continue.

[tonymufford]

anything non eu users should keep in mind?

[E-junkie_Guru]

Just that the GDPR applies to you if you have any buyers in the EU, but since we're handling the data for you, we're taking care of compliance for you as well. If you get any buyers (EU or otherwise) requesting removal of their data, we will have a way to do that for you upon request.