How we handle GDPR


You will have heard by now of GDPR that came into force on 25th May 2018 and the impact it will have on businesses in the European Union. GDPR is the most important changes to data privacy regulation more than 20 years, and mean that some businesses across Europe may need to change the way in which they collect, handle and process customer data.

The impact of GDPR and SMS...

Although things are changing, unless you are a public enterprise, GDPR will not affect the way you communicate with your customers via SMS. That means if you have already received consent and sent text messages to your customers, you can continue to do so and you do not need to have customers re opt-in. As before, you still need to give them an option to opt-out at any time. However, it is necessary that you document it within your privacy policy and terms & conditions.


Here at Voodoo SMS, we have always been transparent and compliant when it comes to processing data, but we have made some changes to our internal procedures to make sure that we are a GDPR compliant SMS provider.

This includes but is not limited to changes to our policies including a data processing agreement, changes to our sign up process and an assessment of all the data that we hold to ensure it is no more than necessary. More information can be found here

For our customers, we are the data processor and you are the data controller, meaning that you determine the purpose and means of the processing of that data. It is your responsibility to ensure the data that is uploaded to our platform is GDPR compliant, along with the content of the messages. For more information on ensuring your data is compliant, see the ICO's guidelines here.

GDPR will help your business and ensure that only the people that want to hear your message receive it and therefore will increase engagement, customer satisfaction and boost ROI.

If you have any questions about GDPR get in touch with the team today.

Disclaimer: Please note that we are a team of techies and not lawyers and therefore can only offer best practice guides and the information here does not constitute as legal advice.