Explainers
What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
iContact
GDPR evidence
Sending marketing emails is easy with iContact’s business email
No public evidenceiContact and GDPR
CertReports found no public GDPR evidence for iContact as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
ExpiredInactive
as of 2 Nov 2026 · confidence 100%- Kind
- Listing
- Issued or listed
- 22 Oct 2018
- Scope
- PII data is collected for the purpose of providing email marketing services to our customers. Customer Registration Data: when a customer, whether an individual or an entity, activates our services, creates an account at the Site or registers at an event we collect account information from that customer, which we refer to in this Policy as “Customer Registration Data.” The Customer Registration Data we collect includes individual or contact name, company name, e-mail address, phone number and other contact information, as well as information about services requested and payment information, such as credit card number, expiration date and billing address. We also assign customers a unique username and password to access their account information through the Site; Customer Message Recipient Data: we also maintain data that has been provided to us or uploaded to the Site by our customers, which we refer to in this Policy as “Customer Message Recipient Data.” Typically, Customer Message Recipient Data relates to individuals or entities who have opted in to receive email messages or other types of communications from our customers, and may include name, e-mail address, contact information, and other information. Under our Anti-Spam Policy, customers must obtain a recipient’s consent prior to sending the recipient an e-mail through our service. For more information, please see the section below entitled “Why Do You Receive Marketing Communications.” We only use Customer Message Recipient Data on behalf of and under the instructions of our Customers. We do not use Customer Message Recipient Data for our own marketing purposes; Site Data: we use cookies, web beacons, and other automated devices to automatically collect information about visitors to our Site and users of our services, which we refer to in this Policy as “Site Data.” The Site Data we collect includes browser type, operating system and IP address, as well as information of the web pages viewed and links clicked by visitors and/or customers. We may combine Site Data with other data we have collected from users, such as Customer Registration Data; and Other Data: We may also collect information about customers or potential customers from our affiliates, from third parties, such as business partners, from our social media pages, during promotional events or from users who submit their information to iContact in order to subscribe to our mailing lists or receive information about iContact products and services.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 2 Nov 2026 | iContact: Inactive | Live pagesha256 c2970a7b06 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is iContact GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 18 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the Marketing category) whose GDPR row is verified or vendor-stated, ranked by similarity.
Attentive Mobile
Marketing
Learn more about Attentive—the SMS and email platform that brings your customer interactions to life with advanced
Return Path
Marketing
Validity's AI-powered email platform is trained on the world's largest email data network, helping teams send smarter, reduce risk, and
Simon Data
Marketing
Simon AI is the Agentic Marketing platform trusted by enterprise
Lob
Marketing
Lob is the only automation platform that transforms direct mail into…
Bluecore
Marketing
Turn your untapped retail data into one-to-one campaigns that make an immediate impact on revenue with
Beefree
Marketing
Power better email creation with Beefree, the technology behind RGE Studio for marketing teams and Beefree SDK for developers building
Appcues
Marketing
Appcues is an AI-powered customer engagement platform that triggers in-app, email, and push experiences right when users are paying
Yotpo
Marketing
We're on a mission to provide brands with everything they need to create winning customer experiences, from discovery to
Understand GDPR evidence
All articlesHow-to
Vendor Security Questionnaire Questions Answered by Public Evidence
Solomon Amos · 26 Sep 2026 · 8 min read