Consents
Every contact page has a Consent (GDPR) panel. It shows, for each purpose, whether the person has an active consent today, and the history of every change behind it. You record changes by hand only for consents gathered offline; the rest arrive on their own.
Brain tracks two purposes: Marketing, such as newsletters and promotional emails, and Profiling, the analysis of a person's behavior or preferences.
Read a contact's consent
Steps
- In Nucleo, go to Brain > Contacts, and then open the contact.
- Find the Consent (GDPR) panel.
Marketing and Profiling show Yes or No: the current state, taken from the latest event for that purpose. Below, the history lists every event, newest first, with:
- The purpose, and whether consent was granted or withdrawn. A green dot marks a grant.
- The legal basis and the date.
- The origin, with an info icon that shows the origin detail when there is one.
- Who registered it.
Record a consent given or withdrawn
Record a change by hand when the person gave or withdrew consent outside Brain: on paper, on the phone, at an event. You need permission to edit contacts.
Steps
- In Nucleo, go to Brain > Contacts, and then open the contact.
- In the Consent (GDPR) panel, click Manage consent.
- In Type, select Marketing or Profiling.
- In State, select Granted or Withdrawn.
- In Legal basis, select the basis (see the table below).
- In Origin, select where the consent came from: Manual, Website form, HubSpot, Meta, Import or Other.
- Optional: in Origin detail (optional), write where exactly, such as the event or the form.
- Click Record.
The event joins the history and the current state updates immediately.
| Legal basis | When to use it |
|---|---|
| Consent | The person explicitly agreed. |
| Legitimate interest | You rely on a legitimate interest that doesn't override the person's rights. |
| Contract | The processing is needed to perform a contract with the person. |
| Legal obligation | The law requires the processing. |
| Not applicable | No legal basis applies, for example when recording a withdrawal. |
Consents recorded automatically
You don't need to record consents that reach Brain through a connected source. They are written to the history with their origin:
- Forms on your website that send contacts to Brain.
- Ad lead forms from Meta, when Meta Business is connected.
- Imports of contacts.
- Newsletter subscriptions and unsubscriptions in Klaviyo, when Klaviyo is connected. Brain keeps them aligned both ways: an unsubscribe in Brain reaches Klaviyo, and one in Klaviyo reaches Brain.
See Connections to connect these tools.
Considerations for consents
- The Contacts report counts newsletter subscribers, the contacts with an active marketing consent, and charts subscriptions and unsubscriptions by month. See Reports.
- Marketing > Newsletter lists every contact with an active marketing consent, with the legal basis, source, date and privacy version of the consent. See Newsletter subscribers.
- When someone asks to stop receiving marketing, open a privacy request and use Unsubscribe from marketing: the withdrawal is recorded here and in Klaviyo, and the request keeps proof of what you did.