Glossary
GDPR basics
The GDPR is a European law that sets rules for how organisations collect, use, store and delete personal data of people in the European Union.
What it means in practice
In general terms it asks for a clear reason to use data, only as much as needed, and respect for people's rights to see or delete theirs. This is a general note, not legal advice, so ask a qualified adviser about your own case.
Example
Using customer emails only for the purpose they signed up for and deleting them on request.