Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Dialog Insight is a Canadian marketing automation, CRM and customer data platform with a strong emphasis on consent and privacy. It offers a website behavioural tracking script alongside email open and click tracking, and includes a built in consent management module and a behavioural tracking opt out form. The platform provides regional data residency, hosting European client data in France and Canadian client data in Quebec, which helps organisations keep personal data close to where it is needed.
Dialog Insight is a Canadian marketing automation, customer relationship management and customer data platform that places consent and privacy at the centre of its design. It combines a unified contact database, multichannel campaigns across email, SMS and push, and a website behavioural tracking capability that links engagement to known contacts. A distinctive feature is its built in consent management module, which lets contacts choose the communication types they receive and the data the organisation may collect, along with a behavioural tracking opt out form. The platform offers regional data residency, hosting Canadian client data in Quebec and European client data in France, and it undergoes annual SOC 2 audits covering security, availability, processing integrity, confidentiality and privacy. It is used by organisations that want sophisticated campaign tooling paired with strong governance over consent.
When the behavioural tracking script is installed on a website, Dialog Insight sets first party cookies that store a visitor identifier used to link page views and on site actions to a contact record. These cookies commonly persist for a period measured in months, allowing returning visitors to be recognised and their behaviour attributed to a profile. In email, the platform records opens through tracking pixels and clicks through tagged links rather than cookies. The behavioural tracking module also stores the consent status and a consent history for auditing, so the data held can include contact details, engagement events, website behaviour and a record of the choices each person has made. All of this is personal data under the GDPR and must be handled accordingly. Contacts can use the behavioural tracking opt out to stop the tracking of clicks and opens across channels.
The behavioural tracking cookies are not strictly necessary to provide a website, so under the ePrivacy Directive they require prior consent before being placed on a visitor device. Because the identifiers are linked to a named contact, the resulting profiling clearly falls within the scope of the GDPR and needs a valid lawful basis. Email open and click tracking that is tied to an identifiable person is treated by several supervisory authorities as profiling that also requires consent. National rules such as the German TTDSG and the guidance issued by the French CNIL confirm that non essential tracking must be opt in and must not run before a choice has been made. The strength of Dialog Insight here is that its consent management and behavioural tracking opt out features are designed to capture and honour those choices, which makes demonstrating compliance more straightforward.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
The website tracking script should be governed by a consent management platform so that it only fires after a visitor has accepted analytics or marketing cookies. In practice this means loading the script through your tag manager or consent gate and blocking it by default until consent is recorded. Dialog Insight also provides its own consent management module and a behavioural tracking opt out form, which let contacts manage communication preferences and withdraw from tracking directly. The consent banner must appear on first page load, offer a genuine choice to refuse, and make withdrawing consent as easy as giving it. Keeping the website consent state aligned with the platform consent records ensures that tracking and profiling stop promptly whenever someone changes their mind.
Dialog Insight is a Canadian company but offers regional data residency, hosting European client data in France within the European Economic Area and Canadian client data in Quebec. For EU customers provisioned on the French region, personal data can stay inside the EEA, which greatly simplifies the transfer analysis. Where data is processed in Canada, organisations can rely on the partial European Commission adequacy decision that covers Canadian commercial organisations under PIPEDA, which recognises an adequate level of protection for those transfers. EU customers should nonetheless confirm in writing which region hosts their account and review the data processing agreement for any supporting sub processors and their locations. The platform states that data is not exposed to jurisdictions lacking equivalent privacy protection, which is a helpful commitment to verify contractually.
Begin by signing a data processing agreement with Dialog Insight and confirming whether your account is hosted in France or in Quebec. Route the behavioural tracking script through your consent management platform so it stays blocked until consent is given, and enable the platform consent management module and behavioural tracking opt out for your contacts. Update your cookie policy and privacy notice to describe the tracking cookies, their purpose and their duration, and explain how email engagement is tracked. Make sure consent choices captured on the website and in the preference centre stay synchronised so that tracking stops when consent is withdrawn. Finally, document your lawful basis for each purpose, set sensible retention periods for engagement and consent histories, and review the configuration periodically as your campaigns and regulations evolve.
Websites using Dialog Insight must obtain user consent under GDPR regulations.
DPIA considerations
A data protection impact assessment is recommended where Dialog Insight is used for large scale behavioural tracking, cross channel profiling or scoring that feeds automated marketing decisions. Assess the behavioural tracking script, the cookies it sets, the linkage to the contact database and the retention of consent and engagement histories. The platform offers a consent management module and a behavioural tracking opt out, which support the assessment, but you should still document the lawful basis for each purpose and the data subject rights workflow. Confirm whether your account is hosted in France or in Quebec and reflect the relevant transfer position in the assessment.
Sample consent text
We use Dialog Insight to manage our communications and to understand how you interact with our emails and website. With your consent, Dialog Insight places a first party cookie that links your behaviour to your contact profile so we can measure engagement and personalise our messages. You can withdraw your consent at any time through our cookie settings, our preference centre or by contacting us.
Third-party domains contacted
dialoginsight.comsupport.dialoginsight.comdialog-mail.comdialoginsight.netCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| di_visitor_id | First party tracking cookie | Several months | Stores a visitor identifier set by the behavioural tracking script so that website page views and on site actions can be linked to a contact record for engagement measurement. |
| di_consent | First party functional cookie | Up to one year | Records the behavioural tracking consent state so the platform applies the contact choice about whether their website and email behaviour may be tracked. |
Dialog Insight places tracking cookies for advertising — comply with GDPR using FlowConsent.
Its website behavioural tracking script sets first party cookies that store a visitor identifier used to link page views and on site actions to a contact record, commonly lasting several months. Email open and click tracking is handled through pixels and tagged links rather than cookies. The platform also records consent status and a consent history for auditing.
Yes. The behavioural tracking cookies are not strictly necessary, so the ePrivacy Directive requires prior consent before they are placed on a visitor device. Because the identifiers are linked to a named contact, the associated profiling also needs consent under the GDPR. Dialog Insight provides a consent management module and a behavioural tracking opt out to help capture and honour those choices.
Consent under GDPR Article 6(1)(a) is the appropriate basis for website behavioural tracking, email open and click tracking and marketing profiling. Legitimate interest under Article 6(1)(f) may support core CRM record keeping where you have completed a documented balancing test. Map each processing purpose to its own lawful basis and record that mapping.
Dialog Insight offers regional data residency, hosting European client data in France within the EEA and Canadian client data in Quebec, so there is no inherent transfer to the United States. Where data is processed in Canada, organisations can rely on the partial European Commission adequacy decision for Canadian commercial organisations under PIPEDA. Confirm in writing which region hosts your account and review the data processing agreement for sub processors.
A data protection impact assessment is recommended where Dialog Insight is used for large scale behavioural tracking, cross channel profiling or scoring that feeds automated marketing decisions. Assess the tracking script, the cookies it sets, the linkage to the contact database and the retention of engagement and consent histories. The consent management module supports the assessment, but profiling and scale are what usually trigger the need for one.
Sign a data processing agreement, confirm whether your account is hosted in France or Quebec, and route the behavioural tracking script through your consent management platform so it stays blocked until consent is given. Enable the platform consent management module and behavioural tracking opt out, and update your cookie policy and privacy notice. Keep website and preference centre consent synchronised so tracking stops when consent is withdrawn.
Other marketing automation and customer engagement platforms with EU data residency offer similar database, campaign and tracking features while keeping data in the European Economic Area. Some organisations pair their email platform with cookieless analytics tools to reduce reliance on tracking cookies. The right choice depends on your data residency needs, channel mix and consent tooling.
List the first party behavioural tracking cookies with their purpose and approximate duration, and explain that they link website visits to a contact profile for engagement measurement. Describe that email engagement is tracked through pixels and tagged links rather than cookies, and mention the behavioural tracking opt out. Keep the policy aligned with what your consent management platform actually blocks and allows, and review it whenever your configuration changes.