Resource topic hub

Privacy & consent resources.

Capture, store, honor, and prove permission. Counsel interprets the law; these guides help operators ask better questions.

30 new long-form guides in this cluster, plus core resources already on the site.

Core guides

Start with the established playbooks.

Core guide

Privacy policy

Existing Retain Inc resource in this cluster.

Read guide ↗

Core guide

CRM data hygiene guide

Existing Retain Inc resource in this cluster.

Read guide ↗

Core guide

Email deliverability guide

Existing Retain Inc resource in this cluster.

Read guide ↗

New topic library

Browse privacy & consent by subtopic.

Consent

Privacy & consent · Consent

Consent evidence for email

A practical guide to keep source, time, and disclosed purpose.

Read guide ↗

Privacy & consent · Consent

Marketing vs transactional permission

A practical guide to do not use a receipt as a newsletter opt-in.

Read guide ↗

Privacy & consent · Consent

Preference vs unsubscribe

A practical guide to honor topic and cadence choices before the last resort.

Read guide ↗

U.S. privacy (educational)

Privacy & consent · U.S. privacy (educational)

CCPA for marketers (educational)

A practical guide to understand that California privacy rules can affect marketing data.

Read guide ↗

Privacy & consent · U.S. privacy (educational)

CPRA deletion and marketing (educational)

A practical guide to honor deletion in marketing systems, not only in a form.

Read guide ↗

Privacy & consent · U.S. privacy (educational)

Global Privacy Control awareness

A practical guide to know that some opt-out signals may apply to your stack.

Read guide ↗

Vendors

Privacy & consent · Vendors

Data processing agreements for ESPs

A practical guide to know who is processor and what they may do.

Read guide ↗

Privacy & consent · Vendors

Vendor risk for customer data

A practical guide to ask where lists go when a tool is connected.

Read guide ↗

Data retention

Privacy & consent · Data retention

Retention periods for marketing data

A practical guide to keep data for a purpose and a time, then stop.

Read guide ↗

Purpose limitation

Privacy & consent · Purpose limitation

Purpose limitation in campaigns

A practical guide to use data for the reason you collected it.

Read guide ↗

Children

Privacy & consent · Children

Children and email marketing (COPPA awareness)

A practical guide to do not build marketing lists of children.

Read guide ↗

Health data

Privacy & consent · Health data

Health-adjacent marketing boundaries

A practical guide to keep symptoms and conditions out of promo.

Read guide ↗

Financial services

Privacy & consent · Financial services

Financial services marketing consent

A practical guide to treat money talk as higher-risk communication.

Read guide ↗

SMS

Privacy & consent · SMS

SMS consent records

A practical guide to store language shown, time, and number.

Read guide ↗

Privacy & consent · WhatsApp

WhatsApp Business consent

A practical guide to collect WhatsApp permission on its own terms.

Read guide ↗

Identity

Privacy & consent · Identity

Cookie and email identity

A practical guide to do not silently stitch a person you cannot explain.

Read guide ↗

Ads activation

Privacy & consent · Ads activation

Hashed email for ads (educational)

A practical guide to understand hashing is not anonymity theater.

Read guide ↗

Deletion

Privacy & consent · Deletion

Suppression after deletion requests

A practical guide to stop marketing even if some systems delete slower than others.

Read guide ↗

Access

Privacy & consent · Access

Employee access to customer data

A practical guide to limit exports and curiosity browsing.

Read guide ↗

Security

Privacy & consent · Security

Security of marketing lists

A practical guide to treat lists as sensitive, not as 'just marketing'.

Read guide ↗

Privacy & consent · Security

Phishing-resistant sender practices

A practical guide to look like yourself so impostors look wrong.

Read guide ↗

Privacy & consent · Security

Brand impersonation and DMARC

A practical guide to use DMARC so others cannot easily fake you.

Read guide ↗

Capture UX

Privacy & consent · Capture UX

Dark patterns in email opt-in

A practical guide to earn permission without tricks.

Read guide ↗

Privacy & consent · Capture UX

Prechecked consent

A practical guide to do not treat a prechecked box as a decision.

Read guide ↗

International (educational)

Privacy & consent · International (educational)

Legitimate interest vs consent (educational)

A practical guide to know these are different legal bases in some regimes.

Read guide ↗

Cross-border

Privacy & consent · Cross-border

Cross-border email data

A practical guide to know where lists live and who can access them.

Read guide ↗

Records

Privacy & consent · Records

Records of processing for marketing

A practical guide to be able to explain what marketing systems do with personal data.

Read guide ↗

Personalization

Privacy & consent · Personalization

Privacy-safe personalization

A practical guide to personalize on coarse, consented context.

Read guide ↗

Minimization

Privacy & consent · Minimization

Data minimization for segments

A practical guide to build audiences from the fewest fields that change the send.

Read guide ↗

Incidents

Privacy & consent · Incidents

Incident response if a list leaks

A practical guide to halt, assess, notify according to counsel, and fix access.

Read guide ↗

More clusters

Keep exploring the library.

Apply the library

Turn the next useful idea into a working system.

Explore the retention audit Book a strategy call