GDPR is coming! Help with opt-in email box please

[dgray]

Everyone here is no doubt aware that the EU General Data Protection Regulation (GDPR) will start being enforced on May 25 2018 and affects all sellers worldwide who make any sales into the EU.

A pre-checked opt-in for marketing purposes is no longer permissible from this date if the customer is in the EU, with potential fines of up to €20 million or 4% of global turnover for infringements of customer consent regulations.

I have a pre-checked email opt-in on my checkout page, using html and javascript in the "HTML- Before the Finalize Button" section.

I was going to change this so that the box defaults to unchecked if the ss_country javascript variable is an EU country. However, the documentation says ss_country is only available in the Thank You page, which is too late. I know that my shopping cart page includes a country and zip field, so I'm wondering why the ss_country isn't available for the checkout page if the country is already supplied on the shopping cart page.

Can the country be determined some way in the checkout page?

BTW, I'm not using the built-in "Add me to your E-mailing list" as I like to put up an informational message when someone unchecks my opt-in box.

[loren_d_c]

JavaScript should have access to all of the form fields on the Checkout page, so try checking the document.billing.elements['Country'].value.

-Loren

[dgray]

Thanks Loren, I'll try that.

[Daisymartin]

Can you please tell me the effect of GDPR.

[dgray]

You might like to join the following facebook group which has a wealth of info and help for small business owners on GDPR.

https://www.facebook.com/groups/euvataction/permalink/848431012009068/

You have probably noticed you've been receiving a ton of mail starting "We have recently updated our privacy policy..." That's GDPR!

Basically it affects anyone that collects or stores personal information about EU citizens. Such as their name, email, address, ip address. There's a lot to it and everyone that stores data like that has to get involved.

[Stifiejohn]

GDPR is for google ads or for SEO?

[dgray]

Google ads, potentially yes, if you are collecting personal data for personalized ads you'll need to get consent. The definition of what constitutes personal data is now very broad, including name, email address, even ip address.

Any email lists obtained without active consent or legal basis will have to be deleted after May 25.