Recording Consent Overview

To be compliant with GDPR, Bronto records any status change to active, onboarding, unsubscribed, unconfirmed, or deleted contacts.

For each consent change, Bronto records the email address, the consent date, whether that date was specified by the customer, an IP address if available, and where that consent change occurred.

Details on the source will depend on the source itself. For example, if a contact was created through Dataloader, the source will show as API and the details showing the name of the integration would be the API token name. If it was a bulk import, it will show the user who initiated the action, as well as the name of the file and the type of operation performed.

If a contact is created as transactional, Forward to Friend, or unsubscribe, this action will not be logged in the consent record. If the contact changes status and is moved from active to transactional, it will be recorded. Consent change is also recorded when a contact changes their email address.

The consent log is not visible in the Contact Details page, but it can be downloaded.

SMS Consent

Bronto can capture SMS consent and will log when a mobile number is added or removed from a keyword subscription, as well as the source of where that action happened.

Bronto also logs when a keyword is deleted. In case of keyword soft-deletion, the actual record will happen 7 days after the keyword soft-deletion.

SMS consent records can be found with the existing email consent export as an additional folder that will include SMS-related consent records.

Data retention

Consent records are kept for the lifetime of the Bronto account.

If a contact is suppressed, it will be deleted as part of the suppression job. The deletion will be recorded in the consent log.

If a contact changes email address, Bronto will, for the same contact, record and display all email addresses associated to that contact.

If a contact is deleted, Bronto keeps the consent log. It will be accessible in the Site Consent Records export.