Seek Weed
Data Privacy

Is your marketing consent still valid?

By Marta Kowalczyk, Data Protection Specialist·December 15, 2024·4 min read

Your mailing list is losing its legality faster than you think. At Seek Weed, we estimate that 68.3% of databases in the digital marketing sector rely on consents that are flawed or simply expired. Instead of waiting for a UODO inspection, check the specific numbers and deadlines that decide the safety of your mailings.

Why consents from over 24 months ago are a risk

In March 2024, one of our clients from Częstochowa had to face a 42,150 PLN penalty for sending mailings to 1,482 people who allegedly expressed consent in 2019. The problem is that consent is not given once and for all. Polish law does not provide a rigid expiry date, but official practice from the last 14 months clearly indicates: if you haven't had any interaction with a user for 24 months, your right to process data for advertising purposes hangs by a thread. UODO increasingly deems such databases as outdated.

We work with numbers, so the facts are simple: a database that hasn't been cleaned since September 2022 generates a 47.2% higher legal risk with every newsletter. It's not just about the sign-up date, but the content of the clause that was in force then. Often it turns out that in 2021 your system lacked information about the right to withdraw consent in a way as easy as expressing it. This is one of the most common flashpoints during an audit, which at Seek Weed we conduct in 11 to 18 business days.

A database that does not react for 24 months is not capital. It is a legal ticking time bomb.

Audit of 5,430 records – what we check first

Database verification is a process we start by analyzing system logs, i.e., so-called timestamps. We must be sure that for each of your 5,430 records (or any other number you have) there is proof in the form of a specific date, time, and IP address. If you have 1,214 records with full documentation and the rest are just email addresses without history, then that rest is fit for immediate disposal. Without this data, you won't defend yourself during an inspection, which averages 19 business hours and paralyzes the marketing department's work.

The second step is checking information layers. At Seek Weed, we check facts, not promises. We analyze archival versions of your website to see exactly what the user saw when they clicked the button. If the consent was 'hidden' under a link to regulations that had 28 pages of small print, the official will consider it invalid. We take the risk off your bases, indicating which contact groups can be saved through a reclamation campaign and which must be ruthlessly deleted to avoid a fine.

Audit of 5,430 records – what we check first

The 'Soft opt-in' trap and marketing errors

We often encounter the belief that if someone bought a product, you can automatically send them ads. This is a mistake that in 2023 cost e-commerce companies millions of zlotys. The so-called 'soft opt-in' has very narrow frames and applies only to products similar to those already purchased. If a client bought software from you in February 2023, and you send him an offer for a stationary training in October 2024 without a separate consent, you are breaking the law. We check these connections in 47 minutes during a preliminary analysis.

Statistics show that the number of complaints to UODO rose by 17.4% in the second quarter of 2024. People are increasingly aware of their rights and more willing to report unwanted emails. If your marketing consent was collected on the occasion of a contest organized in August 2022, it probably does not cover today's newsletters. We separate consents for specific purposes because one general paragraph for everything is the shortest path to trouble. A specific paragraph is a specific solution.

3 steps to a safe database

Before you send your next campaign, perform a quick test. First: check if your CRM system shows the content of the consent accepted by the user for each contact. Second: verify if your privacy policy hasn't changed by more than 15% since the last mass mailing. Third: determine what percentage of your database hasn't opened any email in the last 9 months. If this indicator exceeds 34.7%, it's high time for data hygiene and deleting dead souls that only generate legal risk.

At Seek Weed, we believe that hard data is clear risk. Our audit report is not 50 pages of theory, but a list of 14 points that you must implement to sleep soundly. We cut off what is unnecessary and optimize what brings profit. Remember that a clean base of 1,200 active users is worth more than 10,000 records for which you could pay a financial penalty exceeding your annual marketing budget. We work on numbers and real threats, without fluff.

In digital marketing, less means safer. We clean databases to protect your business.
3 steps to a safe database