GDPR Settings

GDPR Settings

When you have enabled GDPR compliant email marketing , you can view the settings you have configured in the GDPR Settings subtab under Manage Consent .

Subscriber Data Erasure

When leads in EU want to unsubscribe from an organization, it is mandatory that they should be asked if they want their profile to be deleted from the organization or not. For leads who are not from EU, it is the users choice to provide the option for profile deletion.

Users can do this by handling the switch they have in the Data Retention Settings section. If the switch is enabled, the option for profile deletion will be included in the email and if the switch is disabled, profile deletion option will not be included.

The user can set the period for which the data of the subscriber who has raised the request, can be retained. This period is called as the Data Retention Period . The maximum number of days you can retain leads' data is 30 days.

You can change the data retention period by following the steps:

  1. From the Navigation Toolbar select Leads and choose Manage consent .
  2. Click GDPR setup subtab and click the Edit button in the top right corner of the Data retention settings section.


  3. You can change the data retention period by changing the number of days in the number field.


Purpose of sending Email

If you mentioned a single purpose for all your mailing lists, you'll see that purpose and its configuration in the subtab. You can edit its configuration by following these steps:

  1. From the Navigation Toolbar select Leads and choose Manage consent .
  2. Click the GDPR setup subtab, then click the Edit  icon in the top-right corner of each purpose.
  3. From here, you can edit the name of the purpose, the data processing basis, and the description.


If you have mentioned single purpose and you want to change to multiple purposes, or vice-versa, follow these steps:

  1. From the Navigation Toolbar select Leads and choose Manage consent .
  2. Click GDPR setup subtab and click the Change button in the purpose section.
  3. Switch from single to multiple purposes or vice-versa.


It is mandatory to categorize your mailing lists by defining the purpose for which you send emails to them. If you haven't categorized your mailing lists by mentioning your purpose, you can do so by following these steps:


  1. From the Navigation Toolbar , select Leads and choose Manage Consent .
  2. Select the GDPR setup subtab to view your configuration.
  3. You can mention an existing purpose or add a new purpose for your mailing list in the subtab.
    • Click the Edit icon corresponding to the purpose to which you want to add the mailing list.
    • Select the mailing lists that you wish to add.
    • Click the Save button.
  4. To add mailing lists to a new purpose:
    • Click the Add New Purpose button.
    • Enter the details of the purpose.
    • Select the mailing lists you wish to add.
    • Click the Save button.

 Under GDPR compliant email marketing, if you have specified multiple purposes for sending emails to your mailing lists, it is mandatory to categorize all your mailing lists. You will not be able to send campaigns to uncategorized mailing lists. Only a user who is an administrator, will have the privilege to categorize mailing lists. 

Data Erasure Queue

A queue will be maintained for the leads who have opted to delete their profile from an organization. This queue is called as Data erasure queue . You can immediately delete the data of the leads from this queue without having to wait for the retention period to get over. You can see the data erasure queue only when you have enabled Data Retention in GDPR compliant email marketing.

You can delete the subscriber by following the steps:

  1. From the Navigation Toolbar , select Leads and choose Manage Consent .
  2. Select the GDPR setup subtab to view your configuration.
  3. Select Data erasure queue subtab to view the list of leads who have opted to delete their profile.
  4. Select the subscriber whose profile you want to delete.
  5. Click Delete now button to delete the profile immediately.

    • Related Articles

    • GDPR Settings

      When you have enabled GDPR compliant email marketing, you can view the settings you have configured in the GDPR Settings subtab under Manage Consent. Contact Data Erasure GDPR compliance is a must for companies that store and process personal ...
    • GDPR Readiness

      Europe's new privacy policy law intends to give more control to individuals over their personal data. This control over information is given through a few rights. Zoho Recruit has brought in features to make you be compliant under GDPR. Based on user ...
    • Enable GDPR

      Navigate to Settings > Portal Settings > Data privacy configurations, and enable General Data Protection Regulation.  You can choose to keep the data privacy configurations as per your wish, and we have some opt-in/opt-out options for you. The ...
    • GDPR and Zoho CRM - An Introduction

      On this page, we'll be taking a look at what the new rules in GDPR are and how Zoho CRM can help you comply with them. We'll also help you understand how to protect your customers’ data. General Data Protection Regulation (GDPR) is a new set of rules ...
    • EU Data Protection (GDPR): Zoho Desk's Readiness

      The GDPR is here. The European Union has taken a monumental step in protecting the fundamental right to privacy for every EU resident with the General Data Protection Regulation (GDPR) which came into force on May 25, 2018. Simply put, EU residents ...