Uppercase GDPR Guide - V1 | Page 11

GD PR Consent of the data subject But when did they say it was ok? So we know we have to ask people to opt-in. Is that enough? No. There’s more. You need to record when they gave you permission. And you need to log exactly what they were shown when they opted in. If you get an email notification when someone registers or checks out, that may be enough to comply. Provided you store the email securely and it clearly shows what the tick box said. If you’d like to manage consent better, ask us about adding a customer database to your website. 021 2409065 [email protected] 11