The Signature Is What Protects You When You Publish

A verbal yes protects the customer. A signature protects you.

The law does not ask whether the customer agreed. It asks whether you can show that they agreed. GDPR Article 7: “the controller shall be able to demonstrate that the data subject has consented.”

She nodded at the mirror. She was delighted. She meant it — and eight months later, when she asks who gave you permission to put her face on TikTok, “you did, at the mirror, you were really happy about it” is a memory, and memories are not evidence. Four seconds and a finger on a screen is the difference between a record and a recollection.

Nothing goes wrong until it does

Ninety-nine times out of a hundred, none of this matters. The customer loved the video, the tag brought her friends in, everybody is pleased.

The hundredth is not a lawsuit. It is much more ordinary than that, and much more likely:

• She has split up with someone, and she does not want to be findable in a public video from a salon in her neighbourhood.
• Her employer has a policy about staff appearing in commercial content, and someone has noticed.
• She has simply changed her mind, because she does not like how she looks, and looking at it makes her wince.
• She never really registered that “yes” meant TikTok, with a tag, notifying everyone she knows.

In every one of those, she is not being difficult. She is exercising a right she genuinely has, and your job is to take the video down promptly and politely — which is easy, and costs you almost nothing.

The problem is never the takedown. The problem is the conversation before the takedown, where she asks what exactly she agreed to and you cannot tell her.

The same phone call, two outcomes

Picture a café owner who filmed a regular — call her Maria — saying, in fifteen happy seconds, that the flat white here is the only reason she gets out of bed. It went up on Instagram and Facebook. Eight months later Maria messages: please take it down.

With a signature, the call lasts a minute. He opens the record, sees the two channels it went to, pulls both, and replies: done, sorry for the bother. She feels heard. He feels nothing, because there was nothing to defend.

Without one, the same minute goes sideways. She asks what she agreed to. He has no answer to point at — only his memory of a cheerful morning she no longer shares. Now he is negotiating from behind, over something that should have been settled in four seconds at the counter. The takedown was never the hard part. Not being able to show the yes was.

But won’t asking put people off?

Some owners worry the form itself will scare a happy customer away. It does the opposite. The handful who hesitate at the signature are usually the same handful who would have quietly regretted the yes — and a regret you catch now is a takedown you never have to do. A pause at the screen is the filter working in your favour, before anything is public. If someone declines outright, a no is the filter doing its job, not a sale you lost.

The signature does three jobs at once

It proves. This is the legal function, and it is the obvious one. One artefact, at one moment: this person, this content, these channels, these handles, and a signature tying them together.

It makes her read. This is the underrated one. A verbal yes is given in half a second, on trust, mid-conversation, while she is still looking at her hair. A screen that says “I authorise [Business] to publish this content on social media and to tag my profiles”, with a place to sign, costs two seconds of actual attention — and in those two seconds she genuinely understands what is about to happen. A checkbox is clicked. A signature is performed. That difference is why so few signed customers ever come back with a complaint: they knew.

It separates the decisions. Publishing and tagging are not the same act, and the form should not pretend they are. She may be glad to be published and unwilling to be tagged, because a tag notifies her entire network. Two boxes, because two decisions.

Why it looks like signing for a parcel

Because that is exactly what it should feel like.

A three-page release with “perpetual, worldwide, irrevocable rights in all media now known or hereafter devised” does not protect you better. It does the reverse: it frightens the customer, it turns a warm moment into paperwork, it collides with a right of withdrawal you cannot contract away anyway, and — worst of all — it is long enough that she skims it. Consent that was not read is the weakest kind you can hold, and now you have an impressive document signed by someone who did not understand it.

The finger signature on a phone works because it is a familiar, unthreatening gesture that carries no fear. It costs four seconds. It gets read. It is, in every way that matters, stronger than the intimidating version.

This is why we built it into the capture rather than bolting a form on afterwards. The release you go back and chase later is the release you never get.

The signature does not buy you her words

One thing it very deliberately does not do: it does not turn her opinion into your copy.

The consent is permission to publish. It is not permission to edit. Her words go out exactly as she spoke them — the pause, the false start, the sentence she abandoned halfway, the “ehm” — not tidied, not shortened, not improved, and not in the subtitles either, which is where the tidying usually creeps in.

A signature at the bottom of a form does not make a cleaned-up quote honest. And practically, the polish is self-defeating: the hesitations are precisely what make a stranger believe there was a real customer here. A testimonial that reads better than the customer speaks is a fake one, signed or not.

Know where you put it

The other half of protecting yourself, and the half everybody forgets.

Consent can be withdrawn at any time, and it must be as easy to withdraw as it was to give. So when she asks, the video comes down — from every channel you posted it to. Which means you have to know what those were.

A testimonial published by hand to four platforms during a busy fortnight is a testimonial you will be hunting for on a Sunday evening. If you cannot answer “where is Maria’s video?” in under a minute, you cannot honour a withdrawal properly, and the person asking is not in a mood to wait a week.

Keep the record of where it went. It is part of the consent, not an administrative afterthought.

What about a voice or a written one?

It is easy to assume this is a video problem only — a face, on a screen, recognisable to the neighbourhood. It is not. Consent to publish a testimonial is about publishing an identifiable person’s words, not only their face. A voice note carries a voice people know. A written line signed “Maria R.” next to a photo of your shopfront is still her, still public, still hers to withdraw.

So the same four seconds apply whichever form the testimonial takes. The voice-or-video decision changes how shy the customer feels, not whether you need her permission. The signature covers the words and the channels regardless of the medium they go out in — and it is the same signature, on the same screen, either way.

Four seconds, before you publish anything

Not after. Not “I’ll get her to sign next time she’s in.”

Get it in the room, at the moment of recording, on the same screen as the video — because the whole thing is worth four seconds and it converts a warm moment into something you can use publicly, for years, without a knot in your stomach.

What actually has to be on that screen is set out in what a release form needs — six fields, and nothing else.