GDPR

• Right to be informed – Individuals must know how and why their data is processed. Bigin enables communication via consent forms and privacy statements.
• Right of access – Contacts can request a copy of their stored data. You can generate and email CSV exports directly within Bigin without downloading to your system.
• Right to rectification – Individuals can request updates. You send a CSV, they amend it, and you reimport the corrected file.
• Right to erasure (“right to be forgotten”) – You can lock and delete a contact’s record and add their email to a block list to prevent re-import or sync.
• Right to restrict processing / object – Records can be locked to halt further processing (e.g. no edits, no calls, no emails).
• Right to data portability – Data can be exported in machine-readable CSV and sent directly from Bigin.
• Right to be notified – In context of breach, the controller must inform individuals within 72 hours; Bigin’s tools help document and respond appropriately.

• Custom consent forms: Create and send personalized forms to collect opt‑in consent, with custom language and privacy statements embedded.
• Manual consent logging: Enter consent details obtained offline (phone/in-person/postal) via the Data Privacy section in contact records.
• Data subject request handling: Use Bigin’s built‑in Data Privacy features to manage requests from contacts, such as access, export, and rectification.

1. Click Customize in the Consent Form section.
2. Choose form language, specify communication options (Email, Phone), consent statements, privacy statement text, remarks section, and preview.
3. Click Save. You can revert to default anytime.

1. Set Data Processing Basis to Applicable → Select Consent.
2. Use Update consent details to log Communication Preferences, date, remarks, and method (Email or Call).
3. Click Save.

1. Click the filter icon and choose Data Processing Basis.
2. Select the desired criteria to view matching records.

1. Click + Request.
2. Choose the request type (e.g., Access Data, Export Data, Rectify, Stop Processing, Delete Data) and click Save.
   
   

• Access Data (Right of access)
• Rectify Data (Right to rectification)
• Export Data (Right to data portability)
• Stop Processing (Right to restrict processing or object)
• Delete Data (Right to be forgotten) 

1. Click Send email for access request.
   
2. Choose a template or compose a message. The data is attached as a CSV. You can view sent emails in the related list.
   
3. Close the request when complete.
   

1. Create the rectify request.
2. Send an email with a CSV file to the subject.
3. They can return corrected data, which you import back into Bigin.
4. You may then close or delete the request.

1. After raising the request, click Send email for export data.
2. A machine‑readable CSV file is attached and sent—no local download required.
3. You can view, close, or delete the request.

1. Open the user's record and click Data Privacy.
   
2. Under the Data Subject Requests section, click + Request.
   
3. In the New Request pop-up, select Request to stop processing data.
   
4. Click Save. The request will be added to the record.
   
5. Click Lock for the request to stop processing data. The record will be locked. No edits, emails, calls, or campaigns can be initiated on it.
   
6. To resume, click Unlock.
   

• Pending: When a consent request hasn't been sent to data subjects.
• Waiting: After sending the consent form, while awaiting a response.
• Obtained: When consent is received from the data subject.

• Not responded: When consent isn't received within the defined waiting period in Consent Settings.

HIPPA Compliance

3. How does Bigin support HIPAA compliance specifically?

​

Bigin offers the following features: 

• Mark PHI fields in the Contacts module (up to 30 fields per account).
• Restrict PHI access/export through API, data export, Zoho app integrations, and third‑party integrations.
• Encrypt PHI fields for added security. Although encryption is optional, it is strongly recommended.

 

4. Which fields can be marked for PHI (Personal Health Information)?

​

Custom and standard fields in the Contacts module can be marked as PHI, up to 30 in total. Lookup fields and auto‑number fields are excluded from being marked as containing PHI .

 

5. What are the PHI‑restriction options in Bigin?

​

Administrators can toggle the following restrictions depending on business needs: 

• Restrict PHI via the API
• Prevent export of PHI
• Stop transfer of PHI to other Zoho services
• Block PHI transfer to third‑party integrations

6. How do I enable HIPAA compliance in my Bigin account?

1. Navigate to Settings → Users and Controls → Compliance.
2. Enable the HIPAA Compliance toggle.
3. In the Personal Health Data Handling section, activate any needed restriction options . 

7. How do I mark fields as PHI?

​

Navigate to Settings → Fields → Contacts module. Edit the intended field and check Contains Personal Health Data (PHI). This option only appears when HIPAA compliance is enabled.

 

8. What happens if HIPAA compliance is disabled?

​

Disabling HIPAA compliance will automatically unmark all previously flagged PHI fields. To re-enable PHI controls, you must enable HIPAA compliance again and manually mark fields as needed.
 

 

9. How can users view PHI‑marked data?

​

Within a record, PHI‑marked fields are grouped under the Health tab in the Data Privacy section on the record detail page.