The General Data Protection Regulation is often described as bureaucratic, but for users it's one of the strongest privacy laws in the world. It treats your personal data as yours, and it gives you tools to act on that.
The rights that matter most
Right of access: you can ask any company exactly what data they hold about you, and they must tell you. Right to erasure: you can demand deletion. Right to portability: you can take your data and leave.
Why EU data residency is part of the picture
GDPR rights are only as strong as your ability to enforce them. When your data sits on servers outside the EU, that becomes legally murky. SendOrchard keeps all data on EU-based, ISO 27001-certified infrastructure, so your rights remain enforceable.
Data minimisation: collecting less by design
The principle underpinning GDPR is that companies should collect only what they genuinely need. We've built our service around that idea — we hold the minimum metadata required to route mail, and nothing for advertising.
Exercising your rights with us
You can export, correct or permanently delete your data from your account settings, or by contacting our Data Protection Officer. We respond within 30 days, as the law requires.
