Yes. Tracking behavior and movement of your visitors using Smartlook is completely legal, just like using Google Analytics or other services for tracking visitors on your website. From a legal point of view it’s important to be specially careful in case you are recording form inputs because visitors might fill in some sensitive personal data. You can disable the recording of form inputs in the Smartlook settings to ensure you don’t record any personal data of your visitors.
Personal data protection laws may vary across the world. European Union, where Smartlook is based, is generally very strict about personal data protection. Some countries might not require you to inform visitors or to include by name the 3rd parties that collect personal data of your visitors. We recommend to consult with a lawyer to get detailed information about your legal obligations regarding personal data collection.
The data of your visitors is safe with Smartlook. We created several security steps to protect the sensitive data of your visitors.
- The access to the visitor recordings of your website is possible only after logging into your Smartlook account. To login you must know fill in the login credentials (email associated with the Smartlook account and the password).
- The data entered in form fields, which is marked as a password or “sensitive”, is not recorded, nor is it sent to the Smartlook server.
- We have created a tool that allows you to block any elements of your site that migh contain sensitive information.
- Communication between the Smartlook script on your web site and our server supports SSL / TLS (Secure Sockets Layer / Transport Layer Security). Likewise, the SSL / TLS secure communication is setup between the Smartlook servers and the Dashboard (the interface you use to access the recordings).