Abandoned Cart Recovery emails are actually considered transactional emails that relate to an order or transaction with your business, and so are exempt from this requirement. Purely marketing emails are a different beast entirely and would require the necessary consent in the form of a positive opt in for the recipient.

The Abandoned Cart emails have the requisite ability for a recipient to opt-out and if a shop or customer wanted to be hard-deleted we do this on-demand.

Our privacy standards extend GDPR and CCPA to all users, which gives them the ability to be completely deleted from our servers, surrender all data we've collected, regardless of country of the user.

We have never nor would ever sell data to any third party. Not only is doing this prohibited in our Privacy Policy, but it is also against our business interests.

Aside from that, we use general best-in-class tech to protect from attacks that would expose information to third parties.