# Marketing permission and GDPR compatibility

Marketing permission or newsletter consent from customers is recorded either during order confirmation or through customer webhooks. In case of order confirmation, the consent is received through the `marketingPermission` flag. These fields tell Nosto if the customer has given their [GDPR](https://www.eugdpr.org/) compliant consent for receiving marketing emails.

## Consent - Order confirmation

When a customer is placing an order for any product, the checkout page will collect the customer's consent for receiving the marketing emails as shown below,

![Consent during order confirmation](https://user-images.githubusercontent.com/82023195/136540098-3719ca4f-77e6-47d1-8dfa-525010885064.png)

When the customer selects `Email me with news and offers` option and confirms the order, the consent along with order information will be sent to Nosto through `/order/track` API in the following format,

```json
{
    "info": {
        "order_number":"4321633632470",
        "type":"order",
        "email":"manikandan.ravikumar@nosto.com",
        "first_name":"Mani",
        "last_name":"Nosto", 
        "newsletter": "true"
    },
    "items": [{
        "product_id":"7190446571734",
        "sku_id":"41479723778262",
        "name":"Cool Kicks",
        "quantity":1,
        "unit_price":123.12,
        "price_currency_code":"EUR"
    }]
}
```

## Consent - Customer update

A merchant will be able to update customer's information or their marketing consent from store management (Admin) page.

![Update Marketing Consent](https://user-images.githubusercontent.com/82023195/136540161-057d6c72-fa25-4785-aa56-19a48a016200.png)

During this process, Nosto will receive updated customer information, in following format, through a pre-configured webhook,

```json
{
    "id": "12345",
    "email":"manikandan.ravikumar@nosto.com",
    "first_name":"Mani",
    "last_name":"Nosto", 
    "accepts_marketing": true
}
```

## Consent - Customer Tagging

A third approach for sending customer information to Nosto is using `Page tagging`. For more information, please refer [Customer Information Tagging](https://docs.nosto.com/techdocs/implementing-nosto/implement-on-your-website/manual-implementation/adding-the-customer-information)

### Note:

1. If your store has a custom process for gathering marketing permissions or the default logic explained above doesn't fit for your store, you can override Nosto's extension to amend the behaviour. Please read more detailed instructions in our guide on [Import customer data](https://help.nosto.com/en/articles/2884483-how-to-import-customer-data-to-nosto-via-api)
2. In order manually override marketing information for a customer email, follow the steps here [Manually Override Consent](https://docs.nosto.com/techdocs/apis/rest/customers/toggling-email-opt-in-using-the-consent-api)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.nosto.com/shopify/features/marketing-permission-and-gdpr-compatibility.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.