GDPR has been a great opportunity for us to confirm everything we believe about our products. Your data is yours, and we should be able to clearly articulate how we touch it.
General Data Protection Regulation (GDPR) is a new set of rules from the European Union (EU) and sets a standard for how companies use and protect people’s personal data. It comes into effect on May 25, 2018.
While aimed specifically at EU citizens, we feel it aligns closely with our own privacy values (you are our customer, not the product) and we will be providing the same transparency and protection for all our customers, regardless of where they live or their country of citizenship.
It covers:
Anything that can help identify an individual is personal data.
Some examples: your email address, your IP address, your physical address, appointments you might have coming up, where you work, who your family members are.
There are some obvious personal information that we collect for users of any of our products (Fastmail, Topicbox, and Pobox: your email address, billing information, and IP address. But any email content is also considered personal information because it can contain anything. We can’t know what you might have put in your email, so we must treat it as personal data.
GDPR is designed to prevent misuse of your personal information by stopping services from profiling you for financial gain, or monetising you without your knowledge. It effectively says that you own your personal data even if you have entrusted it to someone else, and you have a right to know, and to object to, what the other party is doing with your information.
Fastmail embodied this respectful approach to our customers, long before GDPR was legislated and our commitment to putting you in informed control of your data continues to live on in our values.
FastMail is serious about protecting your privacy. It is one of our core values. We believe that security is more than a checkbox.
We will be updating our policies before GDPR comes into effect, and we continue our commitment to plain language and a clear outline of what you can expect from us and any data processing vendors we use.
You control your data, when it comes to email, contacts and calendars. We provide processing of that data in order to supply you with an email service. Our job is to execute your wishes faithfully, efficiently, and with low friction so you can get on with your day.
We process your data to ensure we can deliver your mail, to keep your mailbox free from spam, and to make it easy to search.
Our support team do not have access to your email content beyond what’s minimally necessary to supply you with service, unless you explicitly provide consent for the purposes of resolving a support issue.
We periodically profile data in aggregate to test and validate the design of software to ensure we can handle size, scale, and throughput of our customer base.
There are only two ways we use your information for anything other than directly providing the email service you pay us for:
Because of our longstanding commitment to your privacy, we are continuing to review our processes and data to make sure that the only staff who have access to your information are the ones who need it in order to provide you with the service you pay us for.
We are ensuring that in meeting our obligations, we don’t get in your way: our service will remain fast, and easy to use. We believe that your privacy is a right, not a chore.
You have the “right to be forgotten” under the GDPR. This means you can request that we delete all your personal data off our platform, without exposing a potential security risk for a malicious attack. You can request your account be removed off our platform and the data will be cleared after a waiting period (just in case a hacker was the one who closed your account).
Our work through open standards means your data has always been portable and you can download it at any time.
We are working with our vendors who help us provide our service to ensure that they, too, are upholding the GDPR and updating our contracts as necessary.
We are preparing Data Protection Agreements (DPAs) for customers to sign, where needed.
We are appointing a Privacy Officer (and you can contact them at [email protected]). Their role is to manage FastMail’s compliance with the GDPR regulation, with the help of an externally appointed Data Protection Officer.
Following on from December’s blog post our executive team has been hard at work for the past few months making preparations for the upcoming GDPR. Current customers, no matter where you are located, should expect to receive notices soon about changes.
If you have any questions or concerns not addressed here, please contact [email protected].
Upgrade your privacy and productivity and join the best in email.
Want more information? Visit our side-by-side comparison chart to learn more about why Fastmail is
a great alternative to Gmail.
Productivity is highly personal. Start using Morgen Assist and Fastmail together in under 5 minutes and begin smart scheduling in your calendar.
Today we are introducing new plans and pricing for new Fastmail customers, offering prices in many global currencies and launching some great deals to get your whole family on Fastmail.
Looking for a way to upgrade your inbox? Fastmail’s productivity features help you simplify your workflow and save time.
