Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Podium is a United States based customer communication platform that brings webchat, business text messaging, online reviews and payments into a single inbox for local businesses. On a website it is deployed as a Webchat widget that sets cookies to identify the chat session and the visitor, and it captures the visitor name and phone number to continue the conversation by SMS. Because these cookies and the phone number are not strictly necessary to display the page, the widget must load and message only after the visitor has given consent.
Podium is a customer communication platform based in the United States. It brings webchat, business text messaging, online reviews and payments together so that local businesses can talk to their customers from a single inbox. On a website, Podium is deployed as a Webchat widget that loads its code from Podium servers and renders a chat bubble in the corner of the page.
When a visitor opens the Webchat widget, Podium sets cookies that identify the chat session and the individual visitor so that the conversation can be maintained across page views. To continue the exchange, the widget invites the visitor to enter a name and a phone number, and the conversation then moves to SMS. The phone number, the name and the message content are personal data, and the widget reads and writes identifiers on the visitor device to keep the session alive.
The visitor name, phone number and chat content that Podium processes are personal data under the GDPR, because they relate to an identifiable person. Storing and reading the webchat and visitor cookies on the device also falls within Article 5(3) of the ePrivacy Directive, which the CNIL in France under the TDDDG, the German authorities under the TDDDG and the AEPD in Spain under the LSSI CE all enforce as a strict prior consent obligation for non essential trackers. Sending marketing or follow up messages by SMS additionally requires the recipient consent expected for direct marketing.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Consent is required before the Podium Webchat widget sets its cookies, because they are not strictly necessary for the visitor to receive the content of the page. That consent must be freely given, specific, informed and unambiguous, and it must be as easy to refuse as to accept. Until the visitor accepts, the widget should not write its cookies, and the visitor should give a separate, clear agreement before their phone number is used to continue the conversation by SMS.
Podium processes conversations and visitor data on United States infrastructure, so European visitor data is transferred outside the European Economic Area. Such transfers require the EU Standard Contractual Clauses 2021/914 within the Podium Data Processing Addendum and a documented Transfer Impact Assessment that considers United States surveillance law, in line with the Schrems II ruling and the guidance of the European Data Protection Board.
Gate the Podium Webchat widget behind your consent management platform so it fires only after the visitor accepts the relevant category. Describe Podium in your cookie policy, including the webchat and visitor cookies it sets and their lifetime. Collect a clear, separate consent for SMS follow up before you message the phone number provided. Sign the Podium Data Processing Addendum, complete a Transfer Impact Assessment and apply the shortest workable retention on conversation records and contact details.
Websites using Podium must obtain user consent under GDPR regulations.
DPIA considerations
A Data Protection Impact Assessment is advisable when Podium Webchat is used at scale to capture visitor phone numbers and to continue conversations by SMS. Document the session and visitor cookies set by the widget, the visitor name, phone number and message content collected through the chat, the routing of conversations into the Podium inbox and connected tools, the transfer of data to the United States and the retention period applied to conversation records. Configure the widget so that it loads only after consent and collect a separate agreement before messaging the phone number.
Sample consent text
We use Podium, a customer communication service operated by Podium Corp. (United States), to offer you webchat. Podium sets cookies to keep your chat session and stores the name and phone number you provide so we can continue the conversation by SMS. This data may be transferred to the United States under the EU Standard Contractual Clauses. Podium will only load if you click Accept.
Third-party domains contacted
podium.comconnect.podium.comapi.podium.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| podium-website-widget-session-id | HTTP cookie (first party) | Session | Identifies the current Webchat session so that messages, step progression and the state of the chat are grouped together during a single visit. |
| podium-website-widget-user | HTTP cookie (first party) | 12 months | Stores a persistent identifier for the visitor so Podium can recognise a returning visitor and link the conversation to a single person across Webchat sessions. |
Podium uses cookies for user preferences — inform visitors with a consent banner.
The Podium Webchat widget sets a session cookie that identifies the current chat session and a visitor cookie that identifies the individual visitor, so the conversation can continue across page views. It also stores the name and phone number you provide in the chat so the exchange can move to SMS.
Yes. The Podium Webchat widget performs non essential tracking and writes cookies to the visitor device, so under the ePrivacy rules you must obtain prior consent before it loads. The widget should stay blocked until the visitor accepts, and you need a separate consent before messaging the phone number by SMS.
The valid legal basis is consent under Article 6(1)(a) GDPR, combined with the prior consent requirement of Article 5(3) of the ePrivacy Directive. Legitimate interest cannot be used for this non essential webchat tracking, and a further consent is expected before SMS marketing or follow up messages are sent.
Yes. Podium hosts its platform on United States infrastructure, so European webchat conversations, visitor identifiers and phone numbers are transferred there. You need the EU Standard Contractual Clauses 2021/914 in the Podium Data Processing Addendum and a Transfer Impact Assessment to cover the transfer.
A Data Protection Impact Assessment is recommended when Podium Webchat is used at scale to capture phone numbers and continue conversations by SMS. Assess the webchat cookies, the visitor name and phone number collected, the routing into connected tools and the United States transfer.
Load the Webchat widget only through your consent management platform after the relevant category is accepted, describe Podium in your cookie policy, sign the Data Processing Addendum and complete a Transfer Impact Assessment. Collect a separate consent for SMS follow up and apply a short retention period to conversations and contact details.
Alternatives include Birdeye, Tidio, Intercom, Drift and LiveChat. They raise similar consent, cookie and transfer questions, so evaluate their hosting location and data processing terms before assuming any of them is lighter on privacy.
Add a dedicated entry that names Podium as the provider, lists the session and visitor cookies with their lifetimes, explains that the widget captures a name and phone number for SMS, and discloses the United States transfer and its safeguard. Keep the entry in step with your consent categories.