This article provides basic information about FastSpring's compliance with the GDPR.
The EU's General Data Protection Regulation (GDPR)
The GDPR is a European Union regulation that establishes a new framework for handling and protecting the personal data of EU-based residents. It came into effect on May 25, 2018.
FastSpring is fully GDPR compliant.
More information about the GDPR, and links to helpful resources, are available at https://info.fastspring.com/gdpr.
In addition, the following diagram illustrating the relationships between FastSpring, you (the seller in this context), and the customer--from the perspective of GDPR compliance--may be helpful.