GDPR & Global Compliance

1. GDPR-compliant by design

MailToucan is built so customers can meet their obligations: explicit consent checkboxes on every captive portal, a privacy-policy link, clear explanations of data use, consent records, unsubscribe in every email and tools to export or delete a contact.

2. Roles

You are the controller of your guests’ data; MailToucan is your processor under our Data Processing Agreement.

3. What we give you

• Consent capture and storage per contact
• Data export and deletion tools to honour data-subject requests
• Email verification and automatic opt-out handling
• A DPA incorporating the EU SCCs and UK addendum
• A published sub-processor list

4. Laws we design for

GDPR and ePrivacy (EU), UK GDPR and PECR, CCPA/CPRA (US states), CAN-SPAM (US), CASL and PIPEDA (Canada), Spam Act and Privacy Act (Australia) and LGPD (Brazil). Compliance is shared: you remain responsible for your own use, content and notices.

5. Contact

hello@mailtoucan.com