As a Data Processor, ChurnZero provides the methods required to help our Customers comply with Privacy Laws such as GDPR and CCPA. The API provides the following end points:

• withdrawConsent
• giveConsent
• requestPersonalData

withdrawConsent

Article 7(3) of the GDPR gives data subjects the right to withdraw consent at any time and “it shall be as easy to withdraw consent as to give it.” This API end point allows you to notify ChurnZero that the data subject has withdrawn consent which will stop ChurnZero from tracking any information about the Data Subject. Because ChurnZero removes the data when Consent is withdrawn this also covers the Right To Erasure (Article 17).

HTTP

Header["ApiKey"] = API_KEY
https://app.churnzero.net/api/v1/privacy/withdrawConsent?accountExternalId=XXX&contactExternalId

• accountExternalId - your unique record to identify your account. This ID should also be in your CRM.

• contactExternalId - must be unique within the account. This could be an email address, a unique record that is also contained in your CRM, or the ID of the contact record of your CRM.

Returns HttpCode 200.

giveConsent

If a data subject has withdrawn consent and then decides to provide consent, this API will remove the blocking of tracking the data subject and allow tracking to occur.

HTTP

Header["ApiKey"] = API_KEY
https://app.churnzero.net/api/v1/privacy/giveConsent?accountExternalId=XXX&contactExternalId

• accountExternalId - your unique record to identify your account. This ID should also be in your CRM.

• contactExternalId - must be unique within the account. This could be a email address, a unique record that is also contained in your CRM, or the ID of the contact record of your CRM.

Returns HttpCode 200.

requestPersonalData

Article 15(3) of the GDPR gives data subjects the right to request "a copy of the personal data undergoing processing. " This API will provide the personal data tracked in ChurnZero.

HTTP

Header["ApiKey"] = API_KEY
https://app.churnzero.net/api/v1/privacy/requestPersonalData?accountExternalId=XXX&contactExternalId

• accountExternalId - your unique record to identify your account. This ID should also be in your CRM.

• contactExternalId - must be unique within the account. This could be a email address, a unique record that is also contained in your CRM, or the ID of the contact record of your CRM.

Return JSON object of Contact and Events.