When you collect sign-ups with Scratcher, you are responsible for the data (the data controller), and Scratcher processes it on your behalf (the data processor).
Security
- Scratcher is ISO 27001 certified and hosted in the EU.
- Use two-factor authentication and give each user only the role they need.
- Read more on our security page and in the security FAQ.
Data processing agreement
Our data processing agreement describes how we handle the data you collect. On Enterprise plans, it is part of the agreement you sign with us. Contact us if you need a signed copy.
Tools in Scratcher that help you follow GDPR
- Consent with checkboxes, saved with text, time and IP address. See Ask for consent and add terms and conditions.
- Double opt-in to confirm email addresses. See Set up double opt-in.
- Automatic deletion of lead data after a campaign ends. See Data & access: deletion, support access and popups.
- Unsubscribe links in campaign emails.
When someone asks about their data
- To see their data: find the lead and look at the Data and GDPR tabs, or export it. See Find and edit leads.
- To have it deleted: open the lead and click Delete.
- To stop emails: they can use the unsubscribe link in your emails.
This article is general help, not legal advice.