GDPR is arriving on May 25th, both ourselves (SCRUMPY Ltd) and our customers (you) need to be compliant with GDPR before May 25th.

Don't panic

Luckily we've been hard at work for the past couple of months on making sure we're all GDPR compliant* before May 25th. We have a plan in place and we've been deploying features and will continue to deploy features both before and after May 25th to both satisfy the requirements of GDPR and make some elements of what it brings a little easier to deal with.

Many of the changes we've been making are completely behind the scenes, some are barely noticeable and some will require your action.

What do I need to do?

For now, nothing, however you do need to keep an eye on your emails as in the coming days we will be contacting you regarding the launch of the 'GDPR Centre'.

What's the plan?

We have a number of features we are planning on launching before May 25th and some after, rest assured you will be ready to be 'GDPR Compliant' (after following the checklist we put together) before May 25th. Here's what has happened and what's happening:

• We have switched all 'opt out' fields to 'opt in'.
• We added a detailed cookie policy to your site.
• We have switched the storage of personal data to be encrypted at rest.
• Shortly we will launch the GDPR Centre under the Settings section of your admin. From within the GDPR Centre there will be a checklist of documents that you should create & maintain to ensure GDPR compliance.
• A generic privacy policy that bases itself on the details of your business will show up on your site in the coming days.
• We will be adding tools to enable you to respond to data erasure and data portability requests within the coming months. In the meantime these requests should be sent to us where we will manually enact them for you.

Where is your GDPR policy?

Our GDPR policy is available to view upon request, please send an email to help@scrumpy.co.uk to receive a copy of it. We will be making access to our policy easier in the coming days by having said policy on our website.

* When we say GDPR compliant we mean that behind the scenes we've done everything needed within our knowledge to prepare your website to be GDPR compliant. Your use of the system (SCRUMPY) and your business practices have a large part to play in GDPR compliance, a part that we are not in control of, as such we highly recommend you educate everyone in your business on GDPR best practices. We recommend you seek legal advice if you have any queries, doubts or concerns about your website or your businesses GDPR compliance.