Forty pixels on checkout.Forty processors without paper.

Your tag manager is a vendor list nobody in procurement has seen.

In one line: Yes, where they process personal data such as identifiers, device data or hashed emails. The brand generally acts as Data Fiduciary and should have a basis, a notice and appropriate contracts.

The estate · E-commerce & D2CHover to inspect

You installed a snippet. You appointed a processor.

The scene

The growth team added pixels the way other teams add fonts. Each one promised better attribution. An audit found forty-one on the checkout page, eleven belonging to companies no one could name, three sending hashed emails abroad.

Where the thinking breaks

The unclear thoughtWhat it breaksThe clearer thought
Pixels are just analytics. They transmit identifiers and behaviour to third parties; that is processing. Inventory pixels as processors, with contracts.
Hashing makes it anonymous. A hashed email that can be matched to a person is still personal data. Treat hashed identifiers as personal data.

A governed tag manager

One owner. An approval step for every new tag. A quarterly review that removes what no longer earns its place. Consent-gated firing for anything marketing.

Monday morning

  1. 01Export the tag manager container.
  2. 02Name the company behind every tag.
  3. 03Remove the ones nobody can explain.

Questions, answered plainly

Are advertising pixels subject to DPDPA?

Yes, where they process personal data such as identifiers, device data or hashed emails. The brand generally acts as Data Fiduciary and should have a basis, a notice and appropriate contracts.

Is hashed email data personal data under DPDPA?

Hashed data that can be matched back to an individual remains data about an identifiable person and should be treated as personal data.

Sector · E-commerce & D2CYour funnel runs on consent. The Act just redefined consent.Read → E-commerce & D2C · Deep diveA trick is not an agreement.Read → E-commerce & D2C · Deep diveInactive is not a retention strategy.Read →

Tell us where your data sits.We'll show you where the exposure is.

A partner replies within one working day, with a first view on your penalty exposure.

Speak to a partner