The General Data Protection Regulation (GDPR) is a European data protection law that took effect on 25 May 2018. RobinReach welcomes the GDPR as an important step forward in protecting the personal data of individuals. Data protection and security are built into how we design our product and run our company, and we are committed to helping our customers meet their own obligations too.
What is the GDPR?
The GDPR is a regulation that gives people in the European Union greater control over their personal data and creates a single, consistent set of data protection rules across Europe. It defines how personal data should be collected, stored, processed, and protected, and it strengthens the rights people have over information about them.
Who does the GDPR apply to?
The GDPR applies to any organization that handles the personal data of people in the European Union, whether or not the organization is based in the EU. That includes companies outside Europe, like services that offer products to EU residents or businesses. RobinReach serves customers around the world, so we apply these protections to everyone who uses our platform.
How is RobinReach compliant with the GDPR?
We treat GDPR compliance as a company-wide commitment rather than a checkbox. Among other things, we:
- Only collect the personal data we need to provide and improve RobinReach.
- Store and transmit data using industry-standard encryption and trusted cloud infrastructure.
- Give you self-service controls to access, export, correct, and delete your data.
- Sign Data Processing Agreements with customers and vet the sub-processors we work with.
- Limit internal access to personal data to the team members who need it to support you.
- Respond to data requests within the timelines the GDPR requires.
GDPR controls in your account
You stay in control of your personal data directly from your RobinReach Account Settings. At any time you can:
Correct your data
Update inaccurate or incomplete personal information in a few clicks.
Erase your data
Permanently delete your content, brands, and account whenever you choose.
Opt out
Unsubscribe from marketing emails and manage your communication preferences.
Data removal process
You decide what stays and what goes. You can delete individual posts, collections, automations, and brands from inside RobinReach, and you can delete your entire account from your Account Settings. When you delete data, it is permanently removed from your active account. If you prefer, email support@robinreach.com and we will process the erasure for you. Some records may be retained only where the law requires it, and any remaining data tied to revoked third-party access is erased once that access is removed.
Your rights under the GDPR
The GDPR gives you a clear set of rights over your personal data. RobinReach supports each of them:
Right of access
Ask for a copy of the personal data we hold about you and how we use it.
Right to rectification
Have inaccurate or incomplete personal data corrected.
Right to erasure
Request deletion of your personal data, also known as the right to be forgotten.
Right to restrict processing
Ask us to limit how we process your personal data in certain situations.
Right to object
Object to processing of your personal data, including for direct marketing.
Right to data portability
Receive your data in a portable format so you can move it to another service.
Data Processing Agreement (DPA)
If your organization needs a signed Data Processing Agreement to use RobinReach, we are happy to provide one. Email support@robinreach.com and our team will arrange it.
Contact us about your data
To exercise any of your rights or ask a question about how we handle your data, email us at support@robinreach.com. We respond to data requests within 30 days, as required by the GDPR. For full details on what we collect and why, see our Privacy Policy and Terms of Service.