GDPR for email marketing

If you email anyone in the EU (or UK), GDPR applies to you, wherever your business is based. It’s the data-protection law built around a simple idea: people own their personal data and get a say in how it’s used. Here’s what it means for your list.

This is general info, not legal advice. For your specific situation, consult a lawyer.

The core ideas

1. You need consent. People must have actively agreed to receive your emails. Pre-ticked boxes and “we added you because you bought once” don’t cut it. The cleanest way to prove consent is double opt-in, where people confirm by clicking a link, and TinyCourier records it.

2. Be clear about what they’re signing up for. Tell people what they’ll get when they subscribe. No bait-and-switch.

3. Make leaving easy. People can withdraw consent anytime. Every TinyCourier email has a one-click unsubscribe, handled instantly.

4. Honor data rights. People can ask to see, or delete, the personal data you hold on them.

How TinyCourier helps

• ✅ Double opt-in with a recorded confirmation, your proof of consent.
• ✅ Instant unsubscribe in every email.
• ✅ Export a subscriber’s data when they request it.
• ✅ “Forget” a subscriber, permanently erasing their personal data. See Delete your data.
• ✅ EU-friendly hosting and clear privacy terms.

Your part

• Only add people who genuinely opted in, never buy lists.
• Be honest at signup about what you’ll send.
• Handle deletion and data requests promptly (TinyCourier gives you the tools).

Do that, and GDPR becomes a set of good habits rather than a headache. Clean, consent-based lists also happen to be your best-performing ones.