GDPR consent on subscription forms

4 min read

From the client's Forms page you create subscription forms hosted by ClevMail, which you embed on the client's site through an iframe.

Turning on consent, per form

In the form builder, the GDPR Consent toggle adds a required checkbox that the visitor must confirm before the form can be submitted. This is a setting of that one form, not of the account: with several forms, each keeps its own toggle, on or off.

Without the consent toggle active, the form collects only the email address, with no checkbox. With it active, the tick is kept on the subscriber as proof: the date and time, the name of the form and the exact words next to the box. You see it on the Subscribers page, under View email history, in the GDPR consent section. Subscribers who signed up through a form without the toggle, or before the platform kept the tick (September 2026), have no such proof, and the section says that no tick is recorded.

Tags on signup

A form can automatically apply one or more tags to subscribers who sign up through it. Those tags can in turn start an automation automatically (for example the welcome automation), with no further manual action.

Tags that mark how someone joined a list (the public form, an old import, an abandoned cart) show a GDPR badge on the Tags page and cannot be renamed, merged or deleted from there. Changing them would move subscribers into or out of the group allowed to legally receive the newsletter.

Subscription confirmation (double opt-in), per account

Separately from the form, Client settings has its own toggle: Ask for email confirmation. With it on, every new subscriber, from any of the client's forms, first gets a confirmation email and only becomes active once they click the link in it; until then they receive no newsletter or automation, and automations started by their tags (a welcome one, for instance) wait for the confirmation too.

Turning the toggle off does not touch subscribers who already confirmed: only new ones become active right away, with no confirmation step, same as before it was turned on.

Articles in the same category

  • Unsubscribes and data deletion requests

    The unsubscribe link, the data deletion page, what happens once someone confirms it, and which physical address to put in Your brand if your company is registered at a home address.