This scenario is far-too-common in a digital world of noise: It’s Monday morning. You’re digging out of your inbox, and you’re on autopilot with your series of familiar senders and subject lines. Scroll. File. Star. Delete. Maybe bulk delete. And then, you see one that isn’t so familiar. It’s a cold email approach from a sales rep. The person, the content, and the company are all completely unfamiliar. You’ve never visited their website or downloaded a single piece of content, yet, they are using your personal information. You feel a mix of violation, frustration, and annoyance as reach to punch “mark as spam” and “delete.” Questions run through your head.
How did that person get my email? Is my name on a list somewhere? Did someone sell or purchase my data without my consent?
Unfortunately, the answer to that last question is “probably.”
In short, the GDPR states that if your organization is located in the EU, and/or stores and processes data of citizens living in the EU, your data and data processes must comply with numerous regulations outlined in the GDPR. The regulations went into full effect on May 28, 2018, and non-compliance is now accompanied by hefty fines.
Now that the GDPR has been in full-effect for a couple of months, most businesses who needed to comply with the regulations have done so (amidst panic and long workdays, nonetheless).
But many businesses—specifically B2B tech companies who are located in the U.S., and strictly sell to other businesses in the U.S.—have ridden the bench on the sidelines without changing much of their data policies.
Are you one of those businesses asking, “Okay, now what?” Here's a plan for how to move forward:
Don’t Ignore the GDPR
It’s easy to feel inclined to ignore the GDPR if your tech business isn’t located in Europe or isn't targeting citizens of the EU, but, it’s essential to keep in mind one fact: the GDPR was designed to reflect the digital world we are living in now and to bring the importance of privacy, data, and consent to the forefront. This means that even if right now, your tech business doesn’t need to comply with the GDPR, it is where regulation is moving.
In other words, take the time now (when fines don’t apply) to get your data policies in line so you’re one step ahead.
GDPR & B2B Tech Sales and Marketing
Getting your B2B tech company on a path toward GDPR compliance also means improving your sales and marketing efforts. That annoyance, frustration, and violation you feel when you receive an unsolicited email or see an online ad is the same feeling your prospects feel when it happens to them.
Here’s what you can do now to ensure your data is GDPR-compliant, and you’re improving your sales and marketing efforts.
Ask Users to Opt-In on Forms
Do you host webinars? Write eBooks and other content offers like white papers? Do you have a “request a demo” form? I’m sure the answer is “yes” to at least one of those.
This means, under the GDPR, your form needs to allow a user to provide opt-in consent before you are allowed to track, retarget or mail those users. This opt-in consent should be added to the bottom of your forms, with a simple checkbox that is un-checked by default for GDPR compliance, like this example from HubSpot:
If you are not required to comply GDPR, but want to take a step forward with consent, you can use an auto-consent, with a clearly defined opt-out option, like GoToWebinar does below:
If you use HubSpot, you can easily add this type of “consent checkbox” to any form by editing your GDPR content in your settings.
Stop Emailing Your Unengaged Subscribers
Piggy-backing off that last statement, ignoring your non-engaged subscribers is always a good idea. These subscribers may have never officially given consent, and now you’re constantly hitting their inbox with content that no longer interests them.
If you use HubSpot, there is a contact property called “Sends since last engagement,” that allows you to create smart lists based on how many emails someone has received since their last engagement. Ignoring those who have been unengaged for 10+ emails is a solid start:
And, you can also automatically opt out these individuals when you go to send an email in HubSpot. Their default is 11 sends since last engagement.
If, however, you are frustrated about the amount of unengaged contacts in your system and want to keep them on board, we recommend sending an email asking them to engage. This is an excellent example from Animoto:
Notify Website Visitors of Your Cookie Usage
Internet users around the world are used to seeing banners like this one:
We normally, blindly hit “accept,” without really thinking about the purpose of these cookies. GDPR aims to change that.
While a simple website banner like the one above is perfectly fine for businesses that don’t need to comply with GDPR, an EU-based company has created a consent lifecycle management tool that allows you to create a cookie notification that does, in fact, give website visitors a choice.
The platform is called Clymb, and is available for under $40/month. You can check it out here.
Don’t Do Anything that Violates Someone’s Digital Privacy
Even if you’re not ready to comply with GDPR, the suggestions listed in this blog are meant to get your business on the right track — to simplify compliance long term, while also improving your sales and marketing efforts.
If you’re looking for a general rule of thumb as what you should do, just keep in mind that digital privacy is still...privacy. It’s as simple as this: You’d feel violated if someone shared your information without asking you for consent, first. You’d feel annoyed if you didn’t subscribe to a newsletter, but you got it anyway. And, you’d be frustrated if you received dozens of emails you didn’t find engaging.
Treat your subscribers the way you’d like to be treated, and you’re already one step ahead.