What GDPR Requires:
Clear, specific, informed, and unambiguous consent under Article 6(1)(a).

Key Requirements:

• Freely given (no coercion)
• Specific and informed
• Unambiguous (affirmative action)
• Record-keeping & easy withdrawal

What We Offer:
Inbuilt direct consent checkboxes, ensuring your from submitters understand what data being collected, why, and how it be used, meeting GDPR standards for freely given, informed, and specific consent.

Consent Checkboxes

Purpose Limitation:

GDRP Solely for Stated Use

A key principle of GDPR, this mandatory checkbox covers purpose limitation (Article 5(1)(b)) and transparency. The form submitter has to agree to allow you to collect their data, for the core purpose of the form.

---

Marketing Communications:

Under GDPR, sending marketing emails beyond the “stated use” core function of the form, requires explicit consent from the submitter. You need to obtain consent from submitters before sending them marketing communications, such as newsletters or promotional emails.

---

Additional Purpose Checkboxes:

What GDPR says:

Under UK GDPR Article 7(2) and Recital 32:

“If the data subject’s consent is to be given following a request by electronic means, the request must be clear, concise and not unnecessarily disruptive to the use of the service for which it is provided.”
“Consent should cover all processing activities carried out for the same purpose or purposes. When the processing has multiple purposes, consent should be given for all of them.”

What this means:

• You must request consent separately for each distinct purpose.
• No bundling of purposes, consent can’t be valid if users are asked to agree to multiple purposes in one checkbox (e.g. marketing + partner sharing + profiling in a single tick box).
• Each purpose must be specific, granular, and unambiguous so individuals can give meaningful consent to one without being forced to agree to another.

The ICO (UK regulator) confirms:

“Consent should not be bundled with other terms and conditions, or be a precondition of signing up to a service, unless necessary for that service.”

Here’s a list of examples of legitimate additional purposes you might offer as optional checkboxes, in line with GDPR requirements (where consent is the lawful basis):

Future contact about services / products
I agree to be contacted about future products, services, or offers from [Company_Name].

Surveys or feedback requests
I consent to being contacted for surveys or feedback regarding my experience.

Sharing data with partners
I consent to my data being shared with [Partner_Name] for related services.

Profiling / personalisation
I consent to my data being used to personalise content or offers.

Event / webinar invitations
I consent to being invited to events or webinars organised by [Company_Name].