What is GDPR?
The General Data Protection Regulation gives individuals the right to control their personal data, and has applied across the European Union since 25 May 2018. It places consent at the centre and grants people a set of enforceable rights over the information organisations hold about them. You can read the full text of the Regulation, or our plain-language definition of the GDPR.
One distinction shapes everything below. In your campaigns you are the data controller and Mailpro is your processor. We supply the tooling; the legal responsibility for how you collect and use your list stays with you.
How Mailpro helps you comply
Proof of consent. You need a record of where each subscriber's address came from. Mailpro's newsletter subscription form includes a consent checkbox, followed by a confirmation email the subscriber must validate — a double opt-in. That evidence is stored in your address book in fields 24 and 25. If you collect addresses outside Mailpro forms, make sure you hold equivalent records for every address, not only the new ones.
Access, rectification and portability. Every newsletter carries a "My Data" link beside the unsubscribe link. Through it the recipient can see everything held about them in your address book, and download, modify or delete it. They can also view your details as the sender via Sender Contact inside My Data.
Right to be forgotten. Every Mailpro newsletter includes an unsubscribe link — something we implemented long before the Regulation required it. If you delete an unsubscriber's record and later re-import an address book, keep a suppression record so they are not contacted again by accident.
Bear in mind that personal data you hold elsewhere — in a CRM, a spreadsheet, an order system — has to be dealt with there too. Mailpro can only act on what is inside Mailpro. For anything beyond that, take proper legal advice.
How Mailpro manages your own data
Our privacy policies set out what we collect and what we do with it. As a Mailpro customer you have the same rights over your own data that your subscribers have over theirs.
Right to be forgotten: you can delete your data and your account from your account information page.
Data portability: you can download all your data, newsletters, address books and statistics at any time.
Right of rectification: you can change your personal information under My Account.
Right to know what we hold: we record the IP address and timestamp of your acceptance of our terms, and you can find that record in your account.
Your data is stored in our Swiss data center, which places it outside US legal process while Switzerland's EU adequacy decision keeps transfers from the European Union straightforward — we explain that on why Mailpro is based in Switzerland.
Guaranteeing the integrity and privacy of the data our customers entrust to us is a first-order concern here. If you have questions, contact us or read our legal documents.