{"id":12206,"title":"GDPR means send them what they want, nothing else.","description":"Teemill is designed so a lot of the hard stuff is built in. You don't need to worry about supply chain, stock, writing code or studio shoots. We designed the data handling part of your store in the same way. In this blog we add detail on what we did to build privacy into the product from the start.","content":"

Teemill is designed so that a lot of the really hard stuff is built in. That's why you don't need to write code - our engineers do that for you - and you don't need to worry about supply chain, stock, returns or studio photography<\/a>. When we built the data handling part of your store, we designed it around the GDPR in the same way. By design, you don't need to do anything as data is collected and secured correctly. The marketing tools you have access to on your side are firewalled from the raw data on our side, so you can have all the advantages of the tools with none of the risk.<\/p>

You do need to use these tools mindfully though, as while we store, control and secure data in a GDPR-compliant way, you are in control of the content you upload on your storefront and when using these tools. So when it comes to the GDPR, the obligation you have is to ensure you do not misuse the tools - that's something we agreed when you signed up - and what it means is that the content you upload to the send side must consistent with what the subscriber actually signed up for.<\/em> We take care of the rest. The purpose of this blog is just to refresh some of the principles and add a little detail on what we did behind the scenes to build privacy into the product from the start.<\/p>

\"\"
-- A good test to ensure your content is compliant: Is this related to your store and is it the kind of stuff they actually want? Take care to send relevant, high quality engaging content to your subscribers.<\/em><\/p>

The GDPR is pretty simple and clever legislation. Without stopping businesses who have a legitimate marketing plan or existing relationships where they need to communicate with a customer to fulfil orders or other contracts (and where the customer is actually interested in content relevant to what they want) the rules go like this: It's the customer's data, and it's up to them how it is used, and if there is any doubt, a business has the minimum amount of right to keep or use it.<\/p>

This helps us answer one fundamental question...<\/p>

Who owns the email customer data?<\/strong><\/h3>

It's not Teemill's data, and it's not your data: The data belongs to the individual. This is a core principle of the GDPR and inconvenient for people who hope to download, sell, use or otherwise exploit data for profit. And that's exactly why it's not possible in Teemill and not legal anymore. This is common sense stuff, a business cannot own that individual's personally identifiable data. Your name and your home address belongs to you. If you give it to a business, you simply lend it to them for a reason, but it's not theirs to do as they please.<\/p>

This is quite an important change to the entire data ecosystem. Any personal data that a business has is simply being lent to the business by the individual and they have a right<\/u><\/em> to expect it is stored and used only in ways that are consistent with what they reasonably expect. At Teemill, we control the data, so the relationship and the services\/communications that a user receives from Teemill is governed by the Privacy Policy and the Terms of Sale when they check out or sign up & confirm their email address.\u00a0 It is up to us to collect it, store it, and indeed delete it in ways that they would expect. We have set that all up so you don't have to.<\/p>

Some of this work we detail in policies. They might sound big, but they relate to some straightforward and practical things that protect the user's data in a way that's designed specifically around the GDPR framework.<\/p>