If you keep a client's name, phone number or address, you are processing personal data and the GDPR applies — whatever the size of your business. ProContact builds in the matching mechanisms rather than leaving you to improvise them.
Your own consent
On first sign-in, ProContact asks you to accept the processing of your data. Until you do, the app stays locked. Accounts that pre-date this requirement are asked to regularise at their next sign-in.
Your contacts' consent
You can email a contact a consent request. The message contains a personal link letting them accept or decline, with no account to create.
ProContact then records:
- the date of the request;
- the date of acceptance or refusal;
- the version of the consent text accepted;
- the IP address at the moment of signing.
That is exactly the evidence a data protection authority asks for in an audit. The contact receives an email confirmation.
Each contact's consent status is visible on their record: pending, signed, or declined.
Export your data
From Profile → Export my data, you download everything held on your account in a machine-readable format. That is your right to portability, and it is also a sensible backup to take now and then.
Deleting a contact
Deleting a contact:
- anonymises the associated data rather than leaving identifiable orphans;
- revokes their portal access immediately;
- sends a notification to the contact concerned.
Deleting your account
From Profile → Delete my account. Deletion is permanent: contacts, appointments, notes and reminders are deleted or anonymised. A confirmation email is sent to you. Export your data before, not after.
Retention and purging
Several retention periods are applied automatically, with no action from you:
| Data | Retention |
|---|---|
| Portal one-time codes | 10 minutes |
| Trusted devices | 60 days |
| Portal access log | 12 months |
Hosting
Data is hosted on servers located in the European Union.
What ProContact does not do for you
The tool provides the mechanisms; compliance remains yours. In particular you still have to keep your own record of processing activities, publish your own privacy policy towards your clients, and collect only the data your business genuinely needs.
ProContact's terms of service and privacy policy set out how responsibilities are shared.