Good Morning! Our marketing department is wanting to set up geofencing advertising using an outside vendor. We currently have a contract with the vendor, who we currently do commercial advertising with. However, this vendor uses a third party for their geofencing advertising. I asked the marketing department to fill out a vendor due diligence form and risk assessment where they stated we would be sharing our customers email addresses with both vendors. I have asked for specifics as to why they need the email addresses and what they will do with them, and I'm still waiting on an answer. My question to all of you, is what concerns I need to have with sharing this information. As far as I know, we will not be advertising thru email, but again, I haven't received a specific answer. Our Privacy policy does state we can share information for marketing purposes and they can't limit this sharing. Do I need to make sure that any contract we currently have also states the purpose for this information and that they will not disclose this information to anyone else? We do not have a contract with the third party - only the vendor that is using this third party - should we have a separate contract with the third party? Also - if we are not advertising thru email in this way - does the CAN-SPAM Act come into play? Anything I need to worry about there?
I appreciate any help I can get!
Thanks!