Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Freedomkit is a marketing automation and lead generation toolkit that uses JavaScript widgets, first party cookies and tracking pixels to capture leads and measure campaign performance.
Freedomkit is a marketing automation and lead generation suite that helps organisations capture, qualify, and convert prospects. It provides drag and drop landing pages, form embeds, email campaigns, and lightweight CRM features. Implementations on a website inject a JavaScript widget that loads forms, tracks campaign sources, and stores a first party cookie. Because that cookie collects identifying information linked to a person, the GDPR and the ePrivacy Directive apply.
Freedomkit typically sets first party cookies such as fk_session (browser session) and fk_uid (twelve months) to identify returning visitors and attribute conversions. It also reads UTM parameters and stores them in fk_campaign for thirty days. The data submitted via Freedomkit forms (name, email, phone) is sent to Freedomkit servers and is considered personal data under the GDPR.
For the lead form processing itself (when the visitor freely submits their data), consent (Art. 6(1)(a)) or contract (Art. 6(1)(b) for pre contractual steps) can apply. For the tracking cookies and pixels, the basis is consent under Article 5(3) ePrivacy combined with Art. 6(1)(a) GDPR. Marketing emails to leads also require separate consent under ePrivacy Art. 13.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Freedomkit servers may be located in Brazil or in AWS regions globally. Brazil currently lacks a Commission adequacy decision under the LGPD, so transfers require Standard Contractual Clauses and a Transfer Impact Assessment. Inform users in your privacy notice.
Sign a Data Processing Agreement with Freedomkit, gate the analytics and marketing cookies behind your CMP, store consent proof for each lead with timestamp and copy of the form fields, and configure data retention policies that respect Art. 5(1)(e) of the GDPR (no indefinite storage).
European alternatives include Brevo (Sendinblue), GetResponse EU, ActiveTrail, and Mailjet. Self hosted form tools such as Formspree EU or Tally allow lead capture without persistent tracking cookies.
Websites using Freedomkit must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended when Freedomkit is used at scale for lead capture and behavioural marketing, especially if cross channel profiling features are enabled.
Sample consent text
We use Freedomkit to manage lead capture and marketing campaigns. With your consent, Freedomkit may set cookies, store form data, and track campaign performance.
Third-party domains contacted
freedomkit.comapp.freedomkit.comtracking.freedomkit.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| fk_session | first_party | Session | Session identifier for the current visit |
| fk_uid | first_party | 12 months | Pseudonymous visitor identifier for returning users |
| fk_campaign | first_party | 30 days | Captures UTM parameters and the originating campaign |
| fk_lead | first_party | 6 months | Stores submitted lead data and consent timestamp |
Freedomkit places tracking cookies for advertising — comply with GDPR using FlowConsent.
First party cookies such as fk_session (session), fk_uid (twelve months), fk_campaign (thirty days), and fk_lead (six months). All are used for lead tracking, attribution, and consent storage.
Consent is required for the tracking cookies (Art. 5(3) ePrivacy). The form submission itself can rely on contract or consent depending on the use case. Marketing emails require separate consent.
Consent for cookies and marketing emails (Art. 6(1)(a) GDPR plus ePrivacy). Contract or consent for the form data (Art. 6(1)(a) or 6(1)(b) GDPR).
Yes. Servers are in Brazil and global AWS regions. Use SCCs plus a TIA for the Brazil transfer.
A DPIA is recommended for large scale lead capture with profiling features, especially cross channel marketing.
Sign a DPA, block tracking cookies until consent, store consent proof, configure retention policies, and inform users in your privacy notice.
Brevo (Sendinblue), GetResponse EU, ActiveTrail, Mailjet, Formspree EU, Tally.
List each Freedomkit cookie with its name, purpose, and duration. Mention the Brazilian transfer with the safeguards used.