GDPR Commitment
How COLDPOST supports your compliance with the EU General Data Protection Regulation.
We are committed to helping our customers use COLDPOST in a way that respects the rights of data subjects under the GDPR.
Our commitments
- We act as a processor and process personal data only on your instructions.
- We offer a Data Processing Addendum incorporating Standard Contractual Clauses.
- We maintain robust security measures appropriate to the risk.
- We support data subject rights requests and breach notification obligations.
Lawful basis for outreach
As the controller, you are responsible for establishing a lawful basis, typically legitimate interest, for contacting the prospects you load into COLDPOST, and for honoring objections and opt-outs.
COLDPOST includes one-click unsubscribe handling and suppression lists to help you respect opt-outs automatically.
Data subject rights
The GDPR grants individuals rights over their personal data. COLDPOST provides tooling to help you fulfil them.
- Access & portability: export a data subject’s records on request.
- Rectification: correct inaccurate contact data.
- Erasure: delete records and add contacts to a permanent suppression list.
- Objection: stop processing on request, enforced across active sequences.
Data transfers
For transfers of EU personal data to the United States, we rely on Standard Contractual Clauses and additional safeguards, as detailed in our DPA.
Exercising your rights
If you are an individual who has received outreach via COLDPOST, your request is best directed to the company that contacted you, as they control your data. You may also contact privacy@coldpost.com and we will route your request appropriately.