How do I add a GDPR consent checkbox to the email address question for a quiz?

Thanks for your reply @Liz - can I add that to the same section as the email part?

If so, how do I do that?

Hi @josie You’d have to add the question after the email since we show questions one at a time, but you could use a Question Group to group them together! :) 

Is there a way to capture consent for all the customers that complete our quiz? 

How we are using Typeform.. Customers complete a short quiz on their dog, then using calculations we recommended the best recipe that's tailored to their dog. Once customers have completed the quiz they are sent to a product page that uses dynamic content based on the customers responses. 

If the customer doesn't check out straight away, we want to send them email reminders (similar to abandoned basket emails)

Is this possible? As we would need this to be GDPR compliant here in the UK.

thank you :)

Hey @Dognetik. Happy Wednesday! 

I moved your question here because I believe the response above can help you too :) Let us know if you have further questions! 

Hey @Liz @john.desborough @Mariana! 

Just a thought - human psychology - if you ask users this as a question, I am afraid most are just going to say No instinctively. It takes a little more effort to consider and answer.

@jag - just a quick ask to clarify ‘which question’ - the opt in question for GDPR consent? or the opt-in to receive additional email contact from the company posting the typeform?

there are different rationales for each scenario, but they essentially both come down to the following:

• if you choose to provide us with your email (or any other details), we will treat them with respect and privacy and only use them for the purposes for which they were collected ie to provide you with information related to request/engagement with the organization and we will never provide it to a third party without your express consent
  • you have the right at any time to ask us to delete all this information from our files, with the sole exception of data that is required within a legal/commercial transaction with our firm. 
• in return for your opting in (and providing us details or data) we will provide you with something of value in return - could be a discount code, could be a report, could be something else that is of value related to the interaction. again reserving the right to contact you within the context of the transaction (we gave you something we thought was of value. what do you think?) - this would allow for lead management and potential additional follow up, as long as the user was provided/afforded the opportunity to unsubscribe and say no more. 

it’s all about “how you interact” with the client and establishing a polite protocol that plays within the rules/guidelines of the ‘game’ as established by the policy regulators. 

</soapbox>

des

Hi @john.desborough - I am referring to asking a form respondent to provide a yes/no answer for using their email address for promotional purposes, and putting that in a question group along with asking for their email address. If you explicitly ask for consent, respondents may end up saying No by default. 

Unfortunately it is a law in many jurisdictions that you must ask consent, and if you want to receive their email in return for something that has value to the recipient, then they will usually provide it. If they choose not to provide an email address, then that is their informed choice. 

It is a decision that the creator of the typeform needs to make, in terms of the purpose of the form and with their target audience in mind. 

you are correct that many people are skeptical of providing email address in return for something but this is all part of the relationship, the meaning interaction, that you want to drive with your clientele. 

to each his/her own

des

No @john.desborough I know - we need to be GDPR compliant with our site, and the reason I looked up this question is I am looking into the same thing for the form we are going to use.

Hi,

I will have a question that collects email addresses. There will be a link for the Privacy Policy. I would like to put a tick box in front of it for "I have read the privacy policy". Ideally i would like to collect the email and have this tick box on the same page/ question slide.

Is this possible?

Hi @Xinnamon First, love the username ha! I added your question here where we have the answer. Let us know if you have any other questions!

Hi Liz!

Love your life quote! xD … but it made me hungry :P

Thanks for this! I think that could work. Do you have a Typeform template that uses this, so i could copy that? If yes, what is its name? 

Maybe it would be worth mentioning to the development team that a tick box on the same page with email field would be more elegant. 

Thnaks a lot!

@Xinnamon - from a fellow user

I think that would be a great idea but there are some of us countries like Canada that, while we are faced with GDPR, we have a bunch of other regulations that are NOT GDPR that we would have to deal with: a single checkbox for GDPR would not fly 

i think the legal question is the appropriate way to do that that covers everyone - it does make us all go to a separate page for the email but does make the explicit optin valid .. 

just my thoughts on this

des

so according to e.g. laws in Canada, it is not legal to have the Privacy Policy link and “I have read” checkbox on the same page with email collecting field? (it is self evident that a double opt in email goes out later on, that once again contains a link to the Privacy Policy) and a button to confirm consent and email address.

@Xinnamon - it is not a question of legal but a question of user behaviour. how many times have you (or me, for that matter) checked the box that said i have read the policy/terms and conditions, when we actually have not. Recommended best practices are to have a separate page that the users are presented so that they see the privacy policy page and agree/disagree  - at least this you can track in your compliance metrics, much more easily than validating the check box and actual viewing of another policy page. Post-hoc emails explaining are reinforcement measures, and should not really be used as the primary means of validation of optin

I see, and follwoing up on that line of thought... What would be best: to have a link to the PP on this separate page or to actually write out there the whole PP? (I am now not sure if Typeform has a limit to how much text can be input on one page)

@Xinnamon - i did not quote the previous as it was getting long: i have seen it put on a Legal Question type here in Typeform but i don’t know what the limit might be.. upwards of a 3 page document i have seen.. 

along with a url to a pdf the user could download and print if they want … 

@Xinnamon - not sure that you might have seen this .. but this is Typeform’s own.. and one of the coolest that i have seen in terms of presenting policies: you could like to something like this as a redirect/new tab if you wanted to go all out .. 

just an example of what others and i found cool: 

Thanks a lot John. I think adding a slide with very long text is making people more worried than calm and it also takes away from the smooth Typeform experience, which is very unique. I am collecting emails during a quiz (competition) where i feel people would be very unlikely to enjoy a good PP read, even if i serve it to them very conveniently (and to their own benefit). It could be worth keeping this use case and impediment due to human behaviour in mind. Maybe Typeform comes up with a new and legaly very sound alternative in the future. 

Thaking this suggestion is completely up to you. 

Just learning about this now, as I’m making my first quiz. I don’t have a privacy policy, and as far as I can tell I’d need to pay for one with bells as whistles for GDPR, etc. 

What would be a good template to use? 

Would something like a legal question with:
Please tick this box to confirm that in return for the insights provided in this quiz, you are happy to be contacted via email by {company} regarding your answers. The data we collect from you is for internal market research only. We will never spam. Your data will be held in accordance with the Data Protection Act 2018 and not shared with any 3rd parties.

 

Hi @martinuk thanks for stopping by!

We cannot provide any legal advice or blanket statements, as what you need to do to be compliant may vary depending on how you use the information collected on your typeform, the tools you use (apart from Typeform), the contracts you have in place with other tools, if you have a privacy policy, among other considerations. We definitely recommend you to contact a lawyer specialised in GDPR, as they will be able to give you legal advice tailored to your specific circumstances. 

Thanks Liz. 

So you wouldn’t advice using typeform to collect any names or emails without first contacting a lawyer for advice?

Hi @martinuk You can certainly use typeform to collect information, but any legal advice regarding GDPR would need to be consulted with through a professional source who can best understand what you’ll be using the data for. 

Hi Liz, 

I think I understand. If the information is anonymous, so I’m not collecting emails or names, then it’s fine. But if I use typeform to collect names, or emails then I need to get legal advice from a lawyer first.