If customers subscribe to your status page by email, you hold personal data: their email addresses. This guide gives you a practical starting point. It is general information rather than legal advice, so get advice if you have specific concerns.
Know your role
For your subscribers, you are generally the controller, as you decide why their data is used. Orbis Digital Ltd acts as your processor, under our Data Processing Agreement. Read the Data Processing Agreement.
How subscribing works
- Double opt-in: a new subscriber confirms their address by email before they are added.
- One-click unsubscribe: every email carries a link that removes the subscriber.
- Emails are sent through Brevo.
Only send what they signed up for
Subscribers asked for status updates. Use the list for incident and maintenance notices, and do not add people to it yourself or use it for marketing.
Tell people what you do
Your privacy notice should say that you run a status page, what you collect, why, and how long you keep it. Name Orbis Status among your suppliers.
Be ready for requests
People can ask for a copy of their data or ask you to delete it. You can export your subscribers as a CSV, and remove any subscriber. You normally have one month to respond.
Limit access
- Give people the lowest role they need: Owner, Admin or Member.
- Turn on two-factor login.
- Remove access when someone leaves.
- Use the audit log to look back when needed.
Closing your account
You can delete your account, which deletes your data. Export anything you need first. Our data is hosted on a server in Europe. Read about security at Orbis Status.
Try Orbis Status for free
- Free subdomain or domain
- Email, Slack and Teams updates
- No card required
Frequently asked questions
Where is Orbis Status hosted?
On a server in Europe.
Do I need consent to let people subscribe?
Subscribers choose to sign up and confirm by email. Consider your lawful basis and what you tell them, and get advice if you are unsure.
