Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
ActiveCampaign is a US-based email marketing, marketing automation, and CRM platform combining email campaigns, automated workflows, contact scoring, site tracking, and SMS marketing. An EU data centre option is available on certain plans. Consent is required for marketing emails and site tracking cookies. ActiveCampaign provides built-in GDPR features including subscription management, consent tracking, and data export/deletion tools.
ActiveCampaign is a customer experience automation platform combining email marketing, marketing automation, CRM, and SMS marketing. It enables businesses to create sophisticated multi-step automation workflows, segment contacts based on behaviour and demographics, score leads based on engagement, and deliver personalised communications across email, SMS, and on-site messages. It is popular with e-commerce businesses, SaaS companies, and agencies.
ActiveCampaign''s site tracking feature installs a JavaScript snippet that tracks page visits and links browsing behaviour to specific contact records. When a known contact (identified via email link click) visits the website, their browsing activity is recorded in ActiveCampaign. This requires consent under the ePrivacy Directive. Block the ActiveCampaign site tracking script via your CMP until analytics consent is given.
ActiveCampaign offers an EU data centre for customers who select it. When the EU data centre is configured, contact data and marketing automation data are stored and processed within the EU, eliminating the need for SCCs for primary data flows. Verify EU data centre availability for your plan with ActiveCampaign support.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
ActiveCampaign provides tools for managing marketing consent: subscription forms with consent checkboxes, double opt-in, unsubscribe handling, and contact tags for tracking consent status. Use these features to record the legal basis for each contact''s marketing communications. Configure ActiveCampaign''s custom fields to store consent timestamps and sources.
Sign the ActiveCampaign DPA. Enable EU data centre if available on your plan. Implement double opt-in for all EU marketing lists. Block site tracking script via CMP until consent. Record consent with custom fields. Use ActiveCampaign''s data deletion features for erasure requests. Add ActiveCampaign to your privacy policy covering email, CRM, and site tracking processing.
Websites using ActiveCampaign must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended for large-scale ActiveCampaign deployments combining detailed contact profiling, behavioural scoring, automated decision-making (lead scoring), and cross-channel marketing automation across many EU contacts.
Sample consent text
I agree to receive marketing emails and communications from [Brand]. I understand I can unsubscribe at any time. My data will be processed in accordance with the privacy policy. ActiveCampaign is used to manage communications on our behalf.
Third-party domains contacted
activecampaign.comtrackcmp.netactivehosted.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| ac_enable_tracking | persistent | 1 year | ActiveCampaign site tracking consent flag recording whether visitor has consented to behaviour tracking |
| __ss_tk | session | Session | ActiveCampaign session tracking token linking web visits to known contact records |
ActiveCampaign places tracking cookies for advertising — comply with GDPR using FlowConsent.
Yes for marketing emails and site tracking cookies. Marketing emails require valid opt-in consent. The site tracking script requires consent before loading under the ePrivacy Directive. ActiveCampaign CRM contacts of existing customers may rely on legitimate interest.
Yes. ActiveCampaign offers an EU data centre for subscribers on eligible plans. When configured, contact and automation data is stored within the EU, eliminating SCCs for primary data flows. Verify EU data centre availability for your plan with ActiveCampaign support.
ActiveCampaign sets ac_enable_tracking (consent tracking, 1 year), __ss_tk (session tracking), and site tracking cookies when the tracking script is installed. These require consent under the ePrivacy Directive before loading.
When a contact clicks a link in an ActiveCampaign email, they are cookied with their contact identity. Subsequent page visits on your site are then linked to their contact record in ActiveCampaign. This links browsing behaviour to identified individuals, requiring consent.
Consent for marketing emails, site tracking cookies, and SMS marketing. Legitimate interest for CRM records of existing customers, transactional emails, and internal pipeline management. Document the basis per contact using ActiveCampaign custom fields.
Create a confirmation automation triggered by form submissions that sends a confirmation email. Only add contacts to your main marketing list after confirmation link click. ActiveCampaign's opt-in confirmation feature simplifies this workflow.
Delete the contact record in ActiveCampaign which removes all associated data (email history, automation logs, custom fields). Use the ActiveCampaign API for programmatic deletion. Respond to erasure requests within 30 days.
Brevo (France) provides email marketing, automation, CRM, and SMS with EU data residency. Mailjet (France) covers email. For full marketing automation with EU hosting, Brevo is the most feature-comparable European alternative.