Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
CTAwidget is a call-to-action and lead generation widget platform that enables website owners to add floating buttons, popups, and contact widgets to their sites. It collects visitor interaction data and lead information. Prior ePrivacy consent is required before the widget loads, and all data is processed in the US via Standard Contractual Clauses.
CTAwidget is a lightweight call-to-action and lead generation widget platform that allows website owners to add floating contact buttons, click-to-call widgets, WhatsApp links, live chat shortcuts, and similar engagement elements to their sites. It is designed for small and medium businesses to improve visitor conversion without complex development work. The widget loads via a JavaScript snippet and collects visitor interaction data.
CTAwidget collects visitor IP addresses, browser and device information, interaction events (widget views, button clicks, contact form submissions), and any lead data submitted through contact forms within the widget. Session cookies are set to maintain the widget state and track interaction attribution.
The ePrivacy Directive requires consent before the CTAwidget script loads and sets cookies. For basic click-to-call or WhatsApp link functionality, if implemented without server-side tracking scripts, the consent requirement may be avoided. However, the full CTAwidget implementation with analytics and attribution tracking requires prior consent. Any lead data collected through widget contact forms requires a privacy notice at point of collection.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
CTAwidget is a US company. All interaction and lead data is processed on US infrastructure. Standard Contractual Clauses apply. Sign a DPA with CTAwidget and document the US transfer in your RoPA.
Block CTAwidget until consent is obtained. Include a privacy notice in any contact forms within the widget. Sign a DPA with CTAwidget. Update your privacy policy to reference CTAwidget and disclose the US transfer. Document the processing in your RoPA.
Websites using CTAwidget must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is generally not required for basic call-to-action widget deployments. It becomes advisable when CTAwidget is used at scale for lead capture combined with automated marketing follow-up systems.
Sample consent text
We use CTAwidget to display contact and call-to-action buttons on this site. CTAwidget may collect interaction data and lead information processed in the United States. Please accept to enable contact features.
Third-party domains contacted
ctawidget.comcdn.ctawidget.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| cta_session | session | Session | Session identifier for the CTAwidget used to track widget interactions and button clicks |
CTAwidget places tracking cookies for advertising — comply with GDPR using FlowConsent.
CTAwidget sets session cookies and interaction tracking cookies when the widget loads. These are non-essential cookies requiring ePrivacy consent before the script loads.
Yes. CTAwidget sets non-essential tracking cookies requiring prior ePrivacy consent. Contact forms within the widget must include a privacy notice. The US data transfer must be disclosed.
Consent (Art. 6(1)(a)) for tracking cookies and interaction analytics. If the widget only provides a click-to-call or WhatsApp link without server-side tracking, legitimate interest may apply with a documented balancing test.
Yes. CTAwidget is a US company. All interaction and lead data is processed in the US. Standard Contractual Clauses apply. Sign a DPA with CTAwidget and document the transfer in your RoPA.
Generally not for basic call-to-action widgets. A DPIA becomes advisable if CTAwidget is used at scale for lead capture combined with automated marketing follow-up systems.
Block the widget until consent is obtained. Include a privacy notice in contact forms. Sign a DPA with CTAwidget. Update your privacy policy and cookie policy. Document the US transfer in your RoPA.
For EU-hosted click-to-call and CTA widgets, Elfsight (EU data options) and similar widget platforms offer European hosting. Building a simple click-to-call or WhatsApp link directly in HTML without a third-party script eliminates all data processing concerns.
Add CTAwidget to your cookie policy as a third-party analytics and lead tracking tool. Note the US data processing and SCC safeguard. If the widget collects contact form submissions, describe that data collection separately under your lead generation processing activities.