Hi @houseofstrauss,
Details about MailChimp’s GDPR compliance can be found here:
https://mailchimp.com/gdpr
In the coming days, we’ll be updating this URL to point to our most relevant articles for customers, as well as notes on MailChimp’s GDPR compliance.
As for our integrations, customers are responsible for ensuring that their use of personal data is compliant with applicable laws, including the GDPR. If an?integration?user intends to use personal data collected from customers during their checkout process for other purposes, they’ll need to be sure that they have a lawful basis under the GDPR for doing so (such as legitimate interests or consent) and be sure that they are notifying customers that the data you are collecting will be transferred to MailChimp; example text is provided on MailChimp’s new?GDPR-friendly signup forms.
We currently have several GDPR-related releases scheduled. These releases include improved functionality for exporting and deleting individual contacts from a MailChimp account, as well as APIs for our new GDPR marketing preference fields.
Although our?list/members?API endpoints will not allow deleted contacts to be re-added to MailChimp, there are no planned changes to our?ecommerce/customers?API endpoints which will still allow customers to be added for the purpose of transactional emails.