Brand GDPR Compliance Guidelines

Last updated: October 2, 2025

Introduction

As a HiTide customer, you maintain control over which marketing and social media platforms you integrate with our service. These platforms act as independent processors alongside HiTide, both processing data on your behalf under separate data processing agreements. While HiTide ensures compliance for our core infrastructure and services, you are responsible for verifying that your chosen independent processor partners have adequate GDPR data transfer safeguards in place.

This page provides guidance on the compliance status of available integration partners and the actions you may need to take to maintain GDPR compliance.

GDPR-Compliant Integration Partners

The following platforms have verified adequate GDPR data transfer safeguards:

  • ✅ Attentive - EU-U.S. Data Privacy Framework certified
  • ✅ Klaviyo - EU-U.S. Data Privacy Framework certified
  • ✅ Shopify - GDPR DPA + Canada Adequacy + EU SCCs 2021/914/EC
  • ✅ Yotpo - EU SCCs 2021/914/EC + UK/Swiss addendums
  • ✅ TikTok - EU SCCs 2021/914/EC + UK/Swiss SCCs + Adequacy Decisions
  • ✅ Instagram/Meta - EU-U.S. Data Privacy Framework certified

✅ No Action Required for the platforms listed above

If you choose any of the platforms listed above, no additional action is required on your part. These platforms already have verified adequate GDPR safeguards in place.

For a complete list of all HiTide processors and integration partners, including technical details and DPA links, see our Sub-processors and Data Processing Partners page.

📋 Additional Documentation Step

The following 3 platforms require direct contact to discuss GDPR requirements:

Postscript

Please contact platform directly for GDPR compliance documentation

BigCo/Sotto

Please contact platform directly for GDPR compliance documentation

Sendlane

Please contact platform for additional GDPR-specific terms

Next Steps to Complete Setup

If you wish to use any of the platforms listed above, please take one of the following steps to confirm GDPR compliance:

Option 1: Request GDPR-Compliant Agreement

Contact the platform directly to request a GDPR-compliant Data Processing Agreement that includes:

  • EU Standard Contractual Clauses (Commission Decision 2021/914/EC)
  • Adequate technical and organizational measures
  • Clear data transfer safeguards for EEA personal data

Template Email:

"Dear [Platform] Team,

As a customer processing personal data of EU residents, we require a GDPR-compliant Data Processing Agreement that includes EU Standard Contractual Clauses (Commission Decision 2021/914/EC) for international data transfers. Could you please provide your current GDPR DPA?

Thank you,
[Your Name]"

Option 2: Choose a Compliant Alternative

Select from our verified compliant platforms instead:

  • For SMS Marketing: Attentive, Klaviyo, or Yotpo
  • For Email Marketing: Klaviyo
  • For E-commerce: Shopify
  • For Social Media: TikTok, Instagram/Meta

Support and Resources

If you need assistance with GDPR compliance for your integration partners:

Note: This guidance is based on our Data Transfer Impact Assessment conducted in compliance with GDPR Chapter V requirements. Platform compliance status is subject to change, and we recommend verifying current status directly with platforms when making integration decisions.