Skip to content

GDPR and PII

How Lime Marketing handles Personally Identifiable Information (PII) differs depending on what channel or feature is used in Lime Marketing

Email Recipients

When importing recipients for sending email campaigns, what data is stored is managed per application by setting up recipient properties to hold that information. At a minimum, it must consist of Email.

This data will be stored forever until manually removed. Another option is to configure Redaction Rules to automatically remove recipients and their data that fulfill certain criteria:

  • Not updated
  • Not opened
  • Not received
  • On block list

For statistics tracking, only the Id of the recipient is stored.

SMS Recipients

When importing recipients for sending SMS campaigns, what data is stored is managed per application by setting up recipient properties to hold that information. At a minimum, it must consist of Mobile Phone Number.

This data will be stored forever until manually removed.

Transactional Email

Transactional Email may contain PII in its subject and/or content. At a minimum, it must have the recipient's Email address. It's up to the consumer to control what data the email consists of.

The content and recipient's Email Address will be automatically removed after 30 days. At this point, the "read online" link will also stop working for the email. The subject will have its content cleared from the recipient email address.

Transactional SMS

Transactional SMS may contain PII in its content. At a minimum, it must have the recipient's Mobile Phone Number. It's up to the consumer to control what data the SMS consists of.

The content and recipient's Mobile Phone Number will be stored forever.

Bounces Messages

Email bounces message may contain the Email Address of the recipient. The bounce messages are automatically anonymized after 30 days.

Automated Flows

When importing participants for Automated Flows, what data is stored is managed per Automated Flow by setting up participant properties to hold that information.

This data will be stored as long as the participant hasn't completed the Automated Flow. 30 days after completing the Automated Flow, that data will be automatically removed.

Automated Flows send Transactional Email and SMS. The sent messages from an Automated Flow follow the same rules as defined for Transactional Email and SMS.

Form responses

When using Event and Survey, which are customizable per form, some fields may contain PII.

This data will be stored forever until manually removed. Another option is to configure Redaction Rules to automatically remove form responses and their data that fulfill certain criteria:

  • Responses for completed events
  • Responses in surveys

Authentication Tickets

When creating tickets to view different pages in Lime Marketing, those tickets may contain PII. This is controlled by the consumer.

The data will be automatically removed when the ticket has expired.