At Mention Me, protecting customer data and privacy is essential. As your referral platform, we comply with GDPR. This article explains your role as Data Controller, our role as Data Processor, and our collaboration in safeguarding customer data through our Data Processing Agreement (DPA).
We'll cover the three key data requests from customers:
- Right to be Forgotten
- Unsubscribe
- Subject Access Requests (SAR)
With detailed instructions for each. You'll also learn how we handle requests made directly to Mention Me in accordance with our privacy policies. This guide equips you to manage data requests confidently and maintain compliance with data protection laws.
There are 3 different types of data requests
Right To Be Forgotten
- Your customer wants to delete all information held on them. Here's how to do it.
Unsubscribe
- Your customer wants to unsubscribe from receiving any communication relating to the referral programme (This will prevent them from receiving any reward notifications going forward). This will not stop your customer from receiving direct communications from you. Here's how to do it.
Subject Access Request (SAR)
- Your customer wants us to provide a file with the information that we hold on them. For this, please email data@mention-me.com with the customer details (name and email address). Here is how to find them. We will upload this in PDF format to the secure file transfer part of the platform, where it will be stored for a maximum of 2 weeks, and reply to your email with confirmation so you can download it and send it to your customer.
What will Mention Me do if we receive a Data Request directly from one of your customers?
One of your customers sends a Data Request directly to Mention Me.
Our customer journey (and all emails we send to referrers, referees and customers) contain prominent links to our privacy notice. The privacy notice describes, among others, all of the rights your customers have in respect of their data and how they may exercise those rights. Customers are directed to our privacy contact form, where they can either unsubscribe or make a data request.
If a customer requests to unsubscribe.
If a customer requests to unsubscribe, they will automatically be placed on our suppression list for your refer-a-friend programme and/or your marketing programme. It is made clear in the privacy notice that any unsubscribe applies only to emails sent by Mention Me and not any other marketing emails they may have subscribed to with you.
You can't choose which emails to unsubscribe a customer from, it's either all or none.