---
title: "GDPR, security and your data"
description: "Where your data is stored, how Scratcher helps you follow GDPR, the data processing agreement and how to handle requests."
url: https://scratcher.io/help/account/gdpr-and-your-data
language: en
---

1. [Help center](https://scratcher.io/help)
2. [Account, team and security](https://scratcher.io/help/account)
3. GDPR, security and your data

# GDPR, security and your data

Where your data is stored, how Scratcher helps you follow GDPR, the data processing agreement and how to handle requests.

When you collect sign-ups with Scratcher, you are responsible for the data (the data controller), and Scratcher processes it on your behalf (the data processor).

## Security

- Scratcher is ISO 27001 certified and hosted in the EU.
- Use [two-factor authentication](https://scratcher.io/help/account/two-factor-authentication) and give each user only the [role](https://scratcher.io/help/account/invite-users-and-roles) they need.
- Read more on our [security page](https://scratcher.io/security) and in the [security FAQ](https://scratcher.io/security/faq).

## Data processing agreement

Our [data processing agreement](https://scratcher.io/data-processing-agreement) describes how we handle the data you collect. On Enterprise plans, it is part of the agreement you sign with us. Contact us if you need a signed copy.

## Tools in Scratcher that help you follow GDPR

- **Consent** with checkboxes, saved with text, time and IP address. See [Ask for consent and add terms and conditions](https://scratcher.io/help/forms/consent-and-permissions).
- **Double opt-in** to confirm email addresses. See [Set up double opt-in](https://scratcher.io/help/forms/double-opt-in).
- **Automatic deletion** of lead data after a campaign ends. See [Data & access: deletion, support access and popups](https://scratcher.io/help/account/data-and-access-settings).
- **Unsubscribe links** in campaign emails.

## When someone asks about their data

- **To see their data**: find the lead and look at the **Data** and **GDPR** tabs, or export it. See [Find and edit leads](https://scratcher.io/help/results/find-and-edit-leads).
- **To have it deleted**: open the lead and click **Delete**.
- **To stop emails**: they can use the unsubscribe link in your emails.

This article is general help, not legal advice.

Account, team and security

- [Change your profile, language and password](https://scratcher.io/help/account/profile-and-password)
- [Turn on two-factor authentication](https://scratcher.io/help/account/two-factor-authentication)
- [Log in with Google, Microsoft or LinkedIn](https://scratcher.io/help/account/log-in-with-google-microsoft-linkedin)
- [Invite users and choose their role](https://scratcher.io/help/account/invite-users-and-roles)
- [Company settings, assets and activity log](https://scratcher.io/help/account/company-settings)
- [Data & access: deletion, support access and popups](https://scratcher.io/help/account/data-and-access-settings)
- [GDPR, security and your data](https://scratcher.io/help/account/gdpr-and-your-data)
- [Agencies and client accounts](https://scratcher.io/help/account/agencies-and-clients)
- [Refer a business and get a gift card](https://scratcher.io/help/account/referral-program)

## Related articles

- [Ask for consent and add terms and conditions](https://scratcher.io/help/forms/consent-and-permissions): Add consent checkboxes for newsletters, link your terms, choose which checkbox subscribes people and send only people who said yes to your email tool.
- [Find and edit leads](https://scratcher.io/help/results/find-and-edit-leads): Search all your leads, filter a campaign's leads, see everything about one person, give a prize, resend to an integration, edit or delete a lead.
- [Data & access: deletion, support access and popups](https://scratcher.io/help/account/data-and-access-settings): Delete lead data automatically after a campaign ends, give our support team access, and limit popups on your site.

## Still need help?

Real people are here to help. If you already use Scratcher, the quickest way is the chat inside the platform.

- **[Chat with us](https://platform.scratcher.io/login)**

    Log in and click the chat button in the bottom-right corner. Rex answers right away, and our team is a click away.
- **[Book a meeting](https://scratcher.io/book-a-meeting)**

    A free 30-minute video call with our team: a tour, campaign ideas or help with your setup.
- **[Email us](mailto:contact@scratcher.io)**

    Write to contact@scratcher.io and we will get back to you.