GDPR compliant

Populate has various tools for GDPR compliance. These are managed at platform level so there is no setup time, plugins or code to be written for each application. As new requirements are created our tools will be extended to meet the new criteria.

Customer accounts

If the project requires customer accounts we have the following tools to keep you ahead of GDPR.

Via settings in the admin you can configure a number of months which dormant user accounts are automatically deleted. Dormant means, since the user last interacted with the site. The default settings is 24 months.

The system also has a fully integrated 'forget me' routine. A user logged into the website can chose to delete their account and all data relating to them.

Forms

Within the Populate admin, administrators can create any number of forms, configure the fields and drop the forms onto any page. Data gathered by these forms is automatically stored in the database. A typical use for these forms is a contact form but can be used for competition entries, applications etc. GDPR states that data should not be retained for longer than a period necessary to complete the action for which the data was submitted. All Populate forms therefore have a purge period, set in days via the admin, the default is 28 days. When data reaches this age it is automatically deleted from the database. The logic here is that if a user fills in a contact form and you haven;t responded within 28 days you are unlikely to do so, so keeping their contact information indefinitely is a direct breach of GDPR.