Skip to main content
Available consent states

Review the various consent options that you can manage with Envoke

Jon Maybury avatar
Written by Jon Maybury
Updated over 2 years ago

A large selection of consent states are available to satisfy CASL and GDPR requirements.

Implied consent automatically expires, express consent doesn't.

You can view the breakdown of your contact list by their consent status from the Consent overview page.

Express consent

Email sending allowed: YES
Documented explicit consent was provided. 

Applies to both CASL and GDPR.

Implied - based on inquiry 

Email sending allowed: YES
​ 
CASL
Applicable for Canadian contacts.
Automatically expires 6 months after obtained. (Tips to prevent expiry of consent.)
Example: submitted a form without providing express consent.
​ 
GDPR
Not applicable.

Outside CASL/GDPR
Applicable when no express consent was provided but unlike for Canadian contacts, it doesn't expire.

Implied - based on transaction 

Email sending allowed: YES

CASL
Applicable for Canadian contacts.
Automatically expires 24 months after obtained. (Tips to prevent expiry of consent.)
Example: purchased tickets without providing express consent.

GDPR
Not applicable.

Outside CASL/GDPR
Applicable when no express consent was provided but unlike for Canadian contacts, it doesn't expire.

Implied - no expiry

Email sending allowed: YES

CASL
Exemptions and special cases only.

GDPR
Implied consent for GDPR is only available in the form of "legitimate interest" - this can be applied to contacts from the interface only (import, manual or bulk update) by using the "Implied - no expiry" consent option.

Expired

Email sending allowed: NO

CASL
Canadian contacts whose implied status expired as per the rolling six month / two year expiry setting.

GDPR
Not applicable

Outside CASL/GDPR
Not applicable

Not provided

Email sending allowed: NO
Neither express nor implied consent provided.

CASL
Applicable if you're adding / importing contacts with unknown consent.

GDPR
For EU contacts this consent state is used if they fill out a form and don't provide express consent.

Outside CASL/GDPR
Applicable if you're adding / importing contacts with an unknown consent state.

Revoked

Email sending allowed: NO
Contacts who revoked consent themselves. (This is not the same as expired consent where consent expired due to inaction.)

Applies to all consent regimes including CASL and GDPR.

A new inquiry (form submission) resets a contact from revoked status to "Implied - inquiry" or "Express" consent.

External spam reported

Email sending allowed: NO
Contacts reported spam in their email apps.
Applies to all consent regimes including CASL and GDPR.

Envoke spam reported

Email sending allowed: NO
Contacts reported spam on the subscription management page.
Applies to all consent regimes including CASL and GDPR.

Did this answer your question?