Privacy

GDPR compliance

Send2CRM is only part of an end-to-end solution. It does provide mechanisms to assist with privacy compliance.

Send2CRM collects information readily available via the web browser, including:

IP address (can be disabled by advanced configuration)
Language
Time zone
Operating system

Personal information such as names and email addresses are only made automatically available when:

Supplied by the user in a form configured for identification
Supplied programmatically by first or third-party scripts

Send2CRM provides the ability to clear and cease collecting data, which may be used as part of an implementation to meet GDPR requirements.

Do Not Track

Available as of website client v1.22.

It is possible to disable tracking locally in the web browser for a specific visitor, e.g. to integrate with a consent manager.

// Disable tracking.
send2crm.util.doNotTrack(true);

// (Re-)enable tracking.
send2crm.util.doNotTrack(false);

// Get current tracking status.
const isTrackingDisabled = send2crm.util.doNotTrack();

The current value is stored in browser local storage and will persist unless the user clears data.

When tracking is disabled:

Form submissions will be marked as anonymous to indicate to the service that identification operations should not be performed.
Session data is not saved in the browser local storage.
UTM parameters are not persisted (where enabled).
Visitor updates are not sent to the service.

Global default

When an individual visitor does not have a recorded response to enable or disable tracking, Send2CRM will apply a global default based on the value of the doNotTrackDefault setting. Apply a true value to this setting during load if you require opt-in for all visitors.