> Is Drip GDPR compliant? Cookies, US data transfers, consent for marketing emails, legal basis and steps to use Drip lawfully on European e commerce sites. > > Canonical: https://www.flowconsent.com/en/services/marketing/drip Marketing # Drip Marketing · [Official website](https://www.drip.com) Drip is a US based e commerce CRM and marketing automation platform owned by Leadpages Inc. It combines email marketing, SMS, on site personalization and visitor analytics. Drip sets first party cookies on the merchant site, identifies known subscribers and tracks their behaviour across products. Personal data is processed on US infrastructure, requiring consent under GDPR and ePrivacy and a documented Standard Contractual Clauses based transfer. [Block Drip until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Marketing - Prior consent Required - Documented cookies 3 - Third-party domains 3 - Servers United States (Drip and AWS infrastructure) Overview ## What does Drip do? ## **What is Drip?** Drip is a US e commerce focused CRM and marketing automation platform owned by Leadpages Inc. It is widely used by Shopify, Magento and WooCommerce stores to send segmented email campaigns, run automated workflows and personalise the on site experience. Drip ties anonymous browser activity to known subscriber profiles using a JavaScript snippet and server side webhooks from the e commerce platform. ## **What data and cookies does Drip collect?** The Drip snippet sets persistent first party cookies (typically \_drip\_visitor and \_drip\_client) to identify the visitor across product and category pages. It records page views, product interactions, cart events, purchases, email and SMS engagement and any custom events configured by the merchant. When the visitor authenticates or submits an email address, the anonymous profile is merged with the identified subscriber record. ## **GDPR and ePrivacy implications** The Drip cookies are not strictly necessary and require ePrivacy consent before the snippet runs. Direct marketing emails sent through Drip require GDPR Article 6(1)(a) consent (or the soft opt in for existing customers under specific national rules). Profiling of individual subscribers triggers transparency obligations and the right to object under Article 21. ## **Consent requirements** Block the Drip snippet via your CMP until consent is obtained. Use a clear opt in for marketing emails at sign up time and a separate opt in for SMS. Respect unsubscribe requests in real time and synchronise them across Drip workflows. ## **Data transfers to third countries** Drip processes data on US infrastructure operated by Leadpages Inc. Standard Contractual Clauses cover the transfer under Article 46 GDPR. Document the transfer in your Records of Processing Activities and complete a Transfer Impact Assessment for high volume European deployments. ## **Practical compliance steps** Sign the Drip DPA with SCCs, configure the CMP to block the snippet pre consent, document Drip in the privacy policy with the US transfer disclosure, list its cookies in the cookie policy and configure data retention in the Drip account. Audit any CRM or e commerce integrations to keep the data flows mapped in your Records of Processing Activities. Compliance ## Drip and the GDPR Drip is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) for cookie based tracking and direct marketing emails. Contract performance (Art. 6(1)(b)) may apply to transactional emails directly tied to a purchase or account. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive (2002/58/EC), national ePrivacy implementations (CNIL recommendation in France, TTDSG/TDDDG in Germany, LSSI and LOPDGDD in Spain), CAN SPAM Act, CCPA/CPRA ### Impact assessment (DPIA) A DPIA is recommended for Drip deployments that process behavioural data of large numbers of European subscribers, that integrate with CRM systems combining engagement and transaction data, or that automate decisions such as audience segmentation at scale. The combination of cookie tracking, identified subscriber profiling and US transfer warrants formal assessment. ### Sample text for your banner > We use Drip to send marketing emails and to track behaviour across our website to personalise communications. Drip sets cookies and processes your data, including email and browsing events, on US infrastructure. Please accept to enable personalised marketing. Cookies and trackers ## What Drip sets and contacts - Tracking method JavaScript snippet that sets first party cookies, captures page views, form submissions, e commerce events and identifies subscribers via email or anonymous user ID. Server side webhook integrations push events to Drip from e commerce platforms and CRMs. - Server location United States (Drip and AWS infrastructure) - Data transferred outside the EU Drip is operated by Leadpages Inc. in the United States. Subscriber data, behavioural events and email engagement are processed on US infrastructure. Standard Contractual Clauses apply for European customers. ### Cookies set (3) | Name | Type | Duration | Purpose | | ------------------ | ------------ | -------- | ------------------------------------------------------ | | \_drip\_visitor | first\_party | 2 years | Persistent visitor identification across product pages | | \_drip\_client | first\_party | Session | Client side session tracking | | \_drip\_subscriber | first\_party | 2 years | Identified subscriber linkage | ### Third-party domains contacted (3) - `getdrip.com` - `tag.getdrip.com` - `api.getdrip.com` Questions ## Frequently asked questions about Drip Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Drip set? Persistent first party cookies including \_drip\_visitor, \_drip\_client and \_drip\_subscriber to identify visitors and known subscribers across the merchant site, plus session level cookies that track product interactions and cart events. ### Does Drip require consent under GDPR? Yes. The Drip snippet sets cookies and processes IP and behavioural data on page load before any user interaction, requiring prior ePrivacy consent. Marketing emails additionally require an opt in under GDPR Article 6(1)(a). ### What is the legal basis for Drip? Consent for cookie based tracking and direct marketing emails. Contract performance may apply to transactional emails directly tied to a purchase or account. ### Does Drip transfer data outside the EU? Yes. Drip is operated by Leadpages Inc. in the United States. Subscriber data and behavioural events are processed on US infrastructure with Standard Contractual Clauses as the transfer mechanism. ### Do I need a DPIA for Drip? Recommended for deployments processing large volumes of European subscriber data, integrating with CRMs that combine engagement and transaction data, or automating segmentation and decisioning at scale. ### How do I implement Drip compliantly? Block the snippet via your CMP, sign the DPA with SCCs, document Drip in the privacy policy, list cookies in the cookie policy, configure retention in the Drip account and audit CRM integrations. ### Are there EU based alternatives to Drip? Brevo (France), Sarbacane (France), Mailjet (France), CleverReach (Germany) and Klaviyo with EU configuration provide e commerce focused email automation with EU data residency. ### How do I update my cookie policy for Drip? Add the \_drip\_visitor, \_drip\_client and \_drip\_subscriber cookies with name, category (marketing), duration and purpose. Reference Drip and Leadpages Inc. as US based processors and link to their privacy policy. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [SEOAnt](https://www.flowconsent.com/en/services/marketing/seoant) [SEOAnt is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. SEOAnt offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, SEOAnt empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/marketing/seoant) [Analytics](https://www.flowconsent.com/en/services/marketing/seoant) · ### [Marketo Forms](https://www.flowconsent.com/en/services/marketing/marketo-forms) [Marketo Forms is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Marketo Forms supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Marketo Forms ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/marketo-forms) [Marketing](https://www.flowconsent.com/en/services/marketing/marketo-forms) · ### [Funnels of Course](https://www.flowconsent.com/en/services/marketing/funnels-of-course) [Funnels of Course is a learning management system (LMS) that enables organizations to create, deliver, and track online courses and training programs. It supports multimedia content, interactive quizzes, certification management, and progress tracking. Funnels of Course provides customizable learning paths, mobile-friendly delivery, and social learning features. With SCORM compliance and detailed analytics, Funnels of Course helps deliver effective learning experiences at scale.](https://www.flowconsent.com/en/services/marketing/funnels-of-course) [Marketing](https://www.flowconsent.com/en/services/marketing/funnels-of-course) · ### [Nurture Boss](https://www.flowconsent.com/en/services/marketing/nurture-boss) [Nurture Boss is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Nurture Boss enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Nurture Boss empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/nurture-boss) [Marketing](https://www.flowconsent.com/en/services/marketing/nurture-boss) · ### [Salespype](https://www.flowconsent.com/en/services/marketing/salespype) [Salespype is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Salespype provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Salespype helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/salespype) [Marketing](https://www.flowconsent.com/en/services/marketing/salespype) · ### [Convert and Flow](https://www.flowconsent.com/en/services/marketing/convert-and-flow) [Convert and Flow is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Convert and Flow enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Convert and Flow empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/convert-and-flow) [Marketing](https://www.flowconsent.com/en/services/marketing/convert-and-flow) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)