Features · On every plan, including free

GDPR tools and PECR consent tracking for UK small businesses

If you hold customers' names, emails and phone numbers, UK GDPR and PECR apply to you. SmartContact builds the record-keeping in, so answering a request or proving consent takes minutes, not an afternoon.

Start free Try the demo

A contact record with their details, marketing consent by channel, timeline and files.
Each person's details, marketing consent, files and history.

What you get

Subject access export

Export everything you hold about a person, in one file, ready to send when they ask for a copy of their data.

Right to erasure

Erase a person, or a sole trader's company, for good. The record is anonymised, the erasure is logged without personal data, and SmartContact stops the same person being imported again by mistake.

Privacy requests log

Log access, erasure, rectification, restriction, objection and portability requests. Each one gets its one-month due date, a warning as it gets close, and a record of how you answered.

Consent by channel

Record whether each person agreed to marketing by email, SMS, phone or post, how and when they agreed, and every withdrawal, as a history you can show.

Export only who you may contact

Download a list of the people whose current consent for a channel is granted, and email sequences check consent before every marketing email.

Hosted in London, logged throughout

Your data is hosted in the UK. Roles decide who can see and change what, and the audit log records every change, by people and by AI agents.

Set it up

  1. Open a contact and use the Privacy menu to export or erase their data.
  2. Log each request in Settings › Privacy requests and close it with the outcome.
  3. Record marketing consent on the contact, or let your web forms record it for you.

Questions

Are the GDPR tools on the free plan?

Yes. Export, erasure, the privacy requests log and consent tracking are on every plan.

Who can erase someone's data?

Owners and admins only. Erasure can't be undone, and AI agents can never erase data.

Can an AI assistant change someone's consent?

An AI agent can record a withdrawal, for example when someone replies asking to be removed, but it can never record consent on a person's behalf.

What happens to deleted records?

Deleted records go to the recycle bin and can be restored for 30 days. After that they are anonymised for good.

Pricing

Basic is free for up to 2 users and 500 companies. Standard is £10 per user per month (or £100 per user per year) with unlimited users and companies. Your first workspace gets Standard free for 30 days, no card needed. Prices exclude VAT.

Start free Compare plans

Related: Web-to-lead forms · Email templates and sequences · Outlook email sync · All features