Shopify

GDPR - Customer Accounts

Become GDPR compliant by streamlining customer data anonymization.

From $10 /month

5.0/5 rated 2 reviews

Get the app

WHAT IS IT?

Become GDPR Compliant

For complete peace of mind and time-saving efficiency, GDPR compliance is made effortless with this app.

Merchants can now easily handle customer data with features like customer redaction and mass anonymization.

HOW DOES IT WORK?

Enjoy the simplicity of our fully integrated solution

  • Customer redaction
  • Mass anonymization
  • Anonymization statistics
  • Seamless integrations : Klaviyo, Gorgias, ...

CUSTOMER REDACTION

Give customers control over data privacy

Add a deletion button where you want on the customer account page and adapt it to your theme

Your customers will be able to command their account's deletion without action on your side. Effective deletion will be performed by Shopify after 10 days, or 180 days after the customer's last order date. During this period, they will have the opportunity to cancel their deletion request.

ANONYMIZATION

Anonymize customers’ data in mass

Anonymize in mass your customers based on their last order, tags or Klaviyo segments. Schedule periodic anonymization following these criteria and set a delay to cancel it in case of mistakes.

For a file import anonymization, simply prepare a file with the email addresses of the customers you want to anonymize.

In the executive history section, keep track of all your anonymizations.

Content

    Getting started

    GDPR - Customer Accounts will help you comply with the European Union’s GDPR regarding the protection of customer data by adding a deletion button. This allows your customers to order their account’s deletion without your intervention.

    Installing the app

    1. Go to the Shopify App Store
    2. Install the app
    3. Access it through the Apps section of your Shopify Store

    Subscription plans

    Your Shopify subscription determines the type of plan you have access to.

    • Basic — 10$ : Customer data redaction in customer account, Customize privacy policy in checkout (Shopify Plus)
    • Standard — 49$ : Customer Data Redaction in customer account, Customizable privacy policy in checkout (Shopify Plus), Third-party integration with Klaviyo and Gorgias
    • Advanced — 89$ : Customer Data Redaction in customer account, Customizable privacy policy in checkout (Shopify Plus), Third-party integration with Klaviyo and Gorgias, Multi-criteria scheduled ans manual mass anonymization, Mass anonymization by file import

    Implementing the customer deletion button

    Configuring the customer deletion button and pop-up

    In the configuration section of the app, you can modify multiple features.

    Customizing the account deletion button

    The account deletion button allows your customers to delete their account without your intervention. To enable the deletion button:

    1. Go to GDPR Customer Accounts › Configuration
    2. In Customer Deletion Button, go to the Account Deletion Button section
    3. Tick the box Enable the Customer Data Deletion Button
    Choosing the type of call to action

    When implementing the button, choose the type of call to action between a button and a hyperlink.

    Personalizing the text

    In the configuration section of the app, you can customize the texts related to data deletion.
    To translate the text into different languages, go to setting up your language preferences.

    Data deletion request text

    The data deletion request text corresponds to the text written on the button located on the customer account.

    Data deletion request cancel text

    The data deletion request cancel text refers to the text that is displayed to customers when they cancel a request.

    Data deletion request confirmation text

    The data deletion request confirmation text refers to the message that is sent to customers to confirm that their personal data will be deleted from your store, as requested.

    The {date} and {days} placeholders can be used to apply the final deletion date and the number of days.

    Data deletion request cancellation confirmation text

    The data deletion request cancellation confirmation text is a message displayed on the customer account page to confirm that their request to cancel a data deletion request has been received and processed.

    Customizing the confirmation popup

    After installing the Data Privacy Policy Consent checkbox in your theme, customize the confirmation popup that will appear went triggering the deletion button.
    To translate the text in different languages, go to Setting your languages preferences:

    Enable the confirmation popup
    1. Scroll down to Confirmation Popup
    2. Tick the box Request Customer Confirmation to enable the Customer Confirmation Popup
    Popup title

    Enter your customized text in the Confirmation Popup Title field

    Popup message

    Enter your customized text in the Confirmation Popup Message field

    Button text

    Enter your customized text in the Confirmation  Button Text field

    Cancel button text

    Enter your customized text in the Cancel Button field

    Adding the application block to your theme

    To add the Deletion Account Button, which will allow your customers to delete their account without your intervention, you will need to modify the template of your online store.

    1. Go to GDPR Customer Accounts › Configuration
    2. Tick the box Enable the Customer Data Deletion button (see Configuring Customer Deletion Button)
    3. Go to Sales channel › Online Store
    4. In the Themes section, click Customize
    5. Click Home page at the top of the page
    6. In the drop-down list,  select Classic Customer Accounts Customer Account

    7.  Log in to any customer account
    8. In the Customer account side panel, go to Template › Apps and click Add block
    9. In the apps section, select GDPR - Customer Accounts

    The button is now added. You can customize the button as well as the pop-up confirmation window. To learn how, go to Configuring the customer deletion button.

    Applying the Privacy Policy Agreement (Shopify Plus)

    Displaying the Privacy Policy Agreement checkbox (Shopify Plus)

    In case the Privacy Policy Agreement checkbox is not displayed in the checkout, you must add it to the template.

    1. Go to Sales channel › Online Store
    2. In the Themes section, click Customize

    3. In the drop-down list, select Checkout and new customer accounts

    4. In the Checkout side panel, click Add app block
    5. Select GDPR Checkout Customer Accounts

    Checkout behavior (Shopify Plus)

    Blocking checkout order

    The purpose of blocking checkout orders is to prevent the ordering process when there is missing or invalid information.

    1. Go to the sales channel › Online Store
    2. Click on the Themes section and Customize
    3. Click Home page at the top of the page
    4. In the drop-down list, select Checkout
    5. Click on the GDPR - Customer Accounts app block on the checkout page of the template
    6. Tick the checkbox Allow app to block checkout

    Including the app block in Shop Pay

    The GDPR - Customer Agreement checkbox will appear in Shop Pay. To display it:

    1. Go to the sales channel › Online Store
    2. Click on the Themes section and Customize
    3. Click Home page  at the top of the page
    4. In the drop-down list, select Checkout
    5. Click on the GDPR - Customer Accounts app block on the checkout page of the template
    6. Tick the checkbox Include app block in Shop Pay

    Removing the app block (Shopify Plus)

    1. Go to the sales channel › Online Store
    2. Click on the Themes section and Customize
    3. Click Home page at the top of the page
    4. In the drop-down list, select Checkout
    5. Click on the GDPR - Customer Accounts app block on the checkout page of the template
    6. Click on Remove app block

    Configuring the Data Privacy Policy (Shopify Plus)

    Checkbox label

    After installing the Data Privacy Policy Consent checkbox in your theme, customize the text that will appear next to the checkbox.
    To translate the text in different languages, go to Setting your languages preferences:

    1. Go to GDPR Customer Accounts › Configuration
    2. Go to the Data Privacy Policy section
    3. In the sidebar component next to the Checkbox label, type your text
    Error message

    You can customize the text that appears if the customer doesn’t check the Privacy Policy Consent checkbox.
    To translate the text into different languages, go to Setting your languages preferences:

    1. In the sidebar component next to Error message if customer doesn’t check the checkbox, type your text

    Customizing the Data Privacy Policy Pop-in

    In addition to the Privacy Policy Consent checkbox, you can add a pop-in that will be displayed when the customer clicks on the privacy policy link.

    Enabling the pop-in
    1. Tick the checkbox next to Enable the pop-in
    1. Next to Link to the privacy policy, type your text
    Selecting the policies to display

    In this section, you can select or deselect 4 types of policies to display on your checkout page:

    • Privacy Policy
    • Terms of service
    • Refund Policy
    • Shipping Policy

    To add or remove them:

    1. Go to GDPR Customer Accounts › Configuration
    2. Go to the Data Privacy Pop-in section
    3. Tick the checkbox of the policy you want to add
    Enabling the custom privacy policy
    1. Tick the checkbox next to Enable the Custom Privacy Policy
    2. Write your custom privacy policy in the text zone below

    Mass anonymization

    In the Mass Anonymization section, you can anonymize your customers' data in bulk.
    To do this, you can choose between an anonymization by criteria or by file import.

    Anonymization by criteria

    Create anonymization by criteria

    Anonymization by criteria allows you to anonymize your customers according to one or more defined criteria.

    1. In the Anonymization by criteria section, click on Create a new configuration

    2. Choose whether to enable the configuration or not and name it
    3. Determine the time period before the final anonymization of customers
    4. Define the anonymization criteria:

      • Enter the number of days since the customer's last order
      • Indicate the tags of the affected customer accounts
      • Select a Klaviyo segment that contains the affected customers

      To do this, you need to integrate the app with your Klaviyo account from the Configuration section. Once done, create a segment in Klaviyo by adding your anonymization conditions.
      To learn how to create a segment in Klaviyo, check out their documentation.

    5. Check the box Repeat every X days if you want this anonymization to be automated and indicate its frequency
    6. Click on Save

    Start anonymization by criteria

    An anonymization can be started manually only if it is not set to automatic.
    To launch an anonymization:

    1. In the anonymization by criteria table, locate the line of the anonymization you want to launch and click on the green arrow

    2. Click on Start

    You can view the status of this anonymization from the execution history.

    Mass anonymization is not immediate. It becomes effective after a number of days that you can configure corresponding to the “effective date” column in the execution history section. Before this date, you can cancel a mass anonymization.

    To cancel an anonymization request, go to the execution history.

    View anonymization by criteria

    It is possible to access all the information of each configuration from the Anonymization by criteria section.

    You get information about:

    • Name: given to the configuration when it was created
    • Active: whether the configuration is running or not
    • Status: the result of the configuration execution

      • Success: an anonymization request could be made for all clients
      • Warning: an anonymization request could not be made for one or more clients
      • Failed: no anonymization request could be made
    • Periodicity: the frequency with which the anonymization is repeated
    • Next execution
    • Last execution
    • Criteria:

    • Delay before final anonymization
    • Actions

      • Modify
      • Delete
      • Preview: gives access to the list of customers concerned by anonymization. Allows you to activate the anonymization request by clicking on Start

    Mass anonymization is not immediate. It becomes effective after a number of days that you can configure corresponding to the “effective date” column in the execution history section. Before this date, you can cancel a mass anonymization.

    Anonymization by file import

    Create and start an anonymization by file import

    Anonymization by file import allows you to anonymize your customers from a file containing the email addresses of the customers to be anonymized.

    1. In the Anonymization by file import section, enter the number of days before the final anonymization of the customers
    2. Download the example csv file. It is possible to modify it with Excel or another text editor

    3. Enter the email addresses of the customers you want to anonymize

    4. Save the edited file and import it into the application by clicking on add files or dragging it

    5. Preview the customers you are about to anonymize
    6. Activate the anonymization request by clicking on Start

    View anonymization by file import

    You can view the anonymization by file import in the Execution History section.

    Execution history

    The execution history lists all anonymizations by criteria and by file import.

    You have information about:

    • Trigger date
    • Trigger: the type of anonymization

      • Manual anonymization
      • Periodic anonymization
      • File import
    • Effective date
    • Status:

      • Pending: is in progress
      • Canceled: has been manually cancelled
      • Error: could not be executed
      • Archived: is effective
    • Number of customers concerned by anonymization
    • Actions

      • View anonymization details
      • Cancel anonymization request

    During the period before the effective date you configured, you can cancel a mass anonymization.

    Monitoring accounts’ deletion

    Analyzing data over time

    You can analyze the statistics of the requests and deletion of accounts with the graphs available on the homepage of the App.  
    The time frame selected applies to both graphs.

    Number of requests

    The number of requests graph corresponds to the number of customers who proceeded to click on the Deletion Account button over the different periods possible below and validated their request. 

    There's a distinction between the requests and the actual deletion process. The deletion process is not immediate and occurs 10 days after the request. (See Number of Deletions)

    To determine a period:

    1. Go to the home page
    2. Click on the calendar under Anonymization Requests
    3. Set your custom time period using the calendar or enter dates manually
    4. Click Apply

    The chart displays two curves: one for the selected period and one for the previous period.

    Number of deletions

    The number of deletions graph shows the number of accounts deleted during the different periods possible below. 

    There's a distinction between the requests and the actual deletion process. The deletion process is not immediate and occurs 10 days after the request. (See Number of Requests)

    To determine a period:

    1. Go to the home page
    2. Click on the calendar under Anonymization Requests
    3. Set your custom time period using the calendar or enter dates manually
    4. Click Apply

    The chart displays two curves: one for the selected period and one for the previous period.

    Tracking the deletion requests

    Status of requests

    From the home page you have access to different information about the customers’ requests.
    To access this information easily, you can use different features:

    • Sorting options
    • Search and filter
    • Adding a search as a view
    All requests

    The All requests view allows you to see all the requests and get information about the:

    • Customer
    • Number of orders
    • Last date order
    • Date of the request
    • Date of the scheduled deletion
    • Request trigger
    • Date of the deletion
    Pending requests

    The Pending requests view allows you to see all the requests and get information about the:

    • Customer
    • Number of orders
    • Last date order
    • Date of the request
    • Date of the scheduled deletion
    • Request trigger
    •  Date of the deletion
    Deleted customer accounts

    The Deleted customer requests view allows you to see all the requests and get information about the:

    • Customer
    • Number of orders
    • Last date order
    • Date of the request
    • Date of the scheduled deletion
    • Request trigger
    • Date of the deletion

    Cancel deletion request

    The All requests view gives you the possibility to cancel a deletion request from a customer.

    1. In the Action column, click Cancel
    2. Click Yes in the confirmation window

    Configuring the integration with third-party applications

    In Configuration › Integration with third-party applications, you have the opportunity to integrate platforms such as Klaviyo and Gorgias.
    Tick the box Enabling for the solution of your choice. To delete customer information you will need an API key for both applications.

    With Klaviyo

    1. Go to Configuration › Integration with third-party applications
    2. In the Klaviyo section, tick the box Enable integration with Klaviyo

    With Gorgias

    1. Go to Configuration › Integration with third-party applications
    2. In the Gorgias section, tick the box Enable integration with Gorgias

    Additional third-party applications

    If you do not use Klaviyo or Gorgias and you are using another third-party application, contact us.

    Configuring the app

    Setting up your language preferences

    To have multiple languages available in the GDPR app, your store needs to be translated into the expected language(s). You must manually add the languages.

    You can find the language preferences in GDPR - Customer App  > Configuration, and you will see various tabs corresponding to every language your store is translated into.
    If your store is not translated yet, follow the steps to configure the app for each language:

    1. On your Shopify Store Home Page, go to Settings › Languages

    2. Click Add Language
    3. Choose the language of your choice and click Next

    4. Assign the language to a market, and click on done

    5. Click on Translate (you will need to choose a translation app)
    6. Click on the three dots next to Translate and click on Publish

    7. In GDPR - Customer Accounts › Configuration you will see various tabs corresponding to every language your store is translated into
    8. For each tab, tick the checkbox Enable the Customer Data Deletion Button

    The buttons and pop-ups are automatically translated from the main language, but you can still customize them by clicking on the tab corresponding to the language.

    Configuring the default values of the customer account anonymization

    In the configuration section of the app, you can select the default values that will be used for anonymizing. The customized data chosen will be assigned to the anonymized customer’s data. 

    Customer's data are never deleted from your Shopify store, but they are anonymized compliantly with the RGPD.

    Anonymizing identity values

    First name

    To anonymize the first name of the customers:

    1. Go to Configuration
    2. Go to Customer Account Anonymization › Identity section
    3. Next to First name, type the text
    Last name

    To anonymize the last name of the customers:

    1. Next to Last name, type the text
    Email

    To anonymize the email of the customers:

    1. Next to Email, type the text
    Phone

    To anonymize the phone numbers of the customers:

    1. Next to Phone, type the numbers

    Anonymizing address

    Street

    To anonymize the street of the customers:

    1. Go to Configuration
    2. Go to Customer Account Anonymization › Address section
    3. Next to Street, type the text
    Postal code

    To anonymize the postal code of the customers:

    1. Next to Postal code, type the text
    City

    To anonymize the city of the customers:

    1. Next to City, type the text
    Country

    To anonymize the country of the customers:

    1. Next to Country, select one from the list

    FAQ

    General

    How does the app help me comply with the GDPR?

    The app helps you meet your data protection obligations by giving your customers direct control over their personal information. It allows you to:

    • Enable account deletion through a dedicated button in the customer account
    • Anonymize customer data, manually or automatically, based on various criteria
    • Let customers update their personal details (password, email)
    • Manage marketing preferences (email, SMS)
    • Add privacy policy checkboxes at checkout

    You can monitor and manage all deletion or anonymization requests from the app’s dashboard.

    A deletion request results in data anonymization after a 10-day delay, or 180 days if the customer recently placed an order in case of a chargeback.

    Does the app integrate with other applications?

    Yes, the app integrates with third-party tools like Klaviyo and Gorgias.
    This allows account deletions to be automatically synchronized across these platforms, so you don’t have to manually handle data in each tool.

    Are customer data deleted or anonymized?

    Data is anonymized, meaning it's replaced with generic values (e.g., "anonymous@email.com"). This makes it no longer identifiable, though it remains visible in your Shopify admin.

    From the customer’s perspective, it is equivalent to a deletion, as their personal information is no longer accessible or reusable.

    Which customer data is anonymized?

    Anonymization covers all personal data linked to a customer, including:

    • First and last name
    • Email address
    • Mailing address
    What’s the difference between Shopify’s native account deletion and the one offered by the app?

    Shopify’s built-in account deletion requires a manual process handled from your admin interface: the customer must contact you, and you then need to delete the account yourself.

    With the GDPR – Customer Account app:

    • Customers can initiate data deletion themselves via a dedicated button in their account
    • You get a full overview of pending and completed requests
    • You can set a cancellation window, automate anonymization, and sync with other tools (Gorgias, Klaviyo)

    This results in a smoother experience for your customers and a more automated workflow for you.

    Plan

    What are the available plans?
    • Basic ($10/mois) :

    Customer data redaction in customer account, customizable privacy policy in checkout (Shopify Plus)

    • Standard ($49/mois) :

    Customer data redaction in customer account, customizable privacy policy in checkout (Shopify Plus), Third-party integration with Klaviyo and Gorgias

    • Advanced (89$/mois) :

    Customer data redaction in customer account, customizable privacy policy in checkout (Shopify Plus), Third-party integration with Klaviyo and Gorgias, multi-criteria scheduled ans manual mass anonymization, mass anonymization by file import

    Can I try GDPR- Customer Account for free?

    Yes, you can try the plan of your choice with a 7-day free trial. Start your trial now!

    Can I change my plan?

    You can change your plan from the Billing section of the app. Simply select the desired plan and follow the instructions to update it.

    Customer data redaction request

    How can a customer request account deletion?

    Customers can initiate a deletion request directly from their personal space via a dedicated button added to their customer account.
    This button is fully customizable and ensures you comply with GDPR transparency requirements.

    Does the account deletion button immediately anonymize all of the customer's data?

    No, by default, Shopify imposes a delay of 10 days, or 180 days from the last order. This delay allows for the management of any potential chargebacks.

    Can I customize the button and associated text?

    Yes, you can:

    • Modify the button text (e.g., "Delete my account")
    • Choose the style (button or link)
    • Adapt confirmation and cancellation messages

    Go to the Configuration section to make these customizations.

    Can a customer cancel their account deletion request?

    Yes, as long as the cancellation period has not expired, the customer can cancel their request directly from their account.

    In this case, no data is anonymized. The account remains active without any changes.

    Can I cancel a customer's account deletion request?

    Yes, you can manually cancel a deletion request as long as it is still pending and the cancellation period has not expired.

    This gives you more flexibility if the customer contacts you to change their mind or if there was an error.

    Manual and automatic bulk anonymization

    What types of anonymization are available?

    There are two ways to anonymize multiple customer accounts in a single operation:

    • By criteria: You define filters such as the date of last order, inactivity, customer tags, etc. This method is ideal for targeting a specific customer segment.
    • By file import: You import a CSV file containing the email addresses of the accounts to be anonymized manually.

    An execution history records all anonymizations for better tracking of completed actions.

    During the period leading up to the effective date you configured, you can cancel a mass anonymization.

    Can I automate anonymization?

    Yes, if you use anonymization by criteria, you can schedule automatic execution at regular intervals.
    This saves you from having to manually trigger actions and ensures continuous compliance with minimal effort.

    What criteria are available for automatic anonymization?

    You can define your own automatic anonymization rules using the following criteria:

    • Account age: Targets customers with no orders for a specific number of days.
    • Last order age: Filters customers whose last order was placed more than X days ago.
    • Customer tags: Limits anonymization to specific tags.
    • Klaviyo segments: By connecting Klaviyo, you can use your custom segments as anonymization criteria.

    These criteria can be combined to target specific customer profiles accurately.

    Can I use import files?

    Yes. Simply import a CSV file containing the email addresses of the customers to anonymize.

    From the Anonymization by file import section, upload your list and confirm the anonymization. This method is useful if you want to process a specific selection of accounts.

    Is the anonymization immediate?

    No, a minimum delay of 3 days is applied before the final anonymization. This delay can be customized when setting up a bulk anonymization.

    Can an ongoing anonymization be cancelled?

    Yes, as long as it is still pending and the withdrawal period has not expired. Once the deadline has passed, the action becomes irreversible.

    How can I know if my anonymization is effective?

    In the Execution History section, a dedicated dashboard allows you to view the status of each anonymization:

    • Pending: In progress
    • Cancelled: Has been manually cancelled
    • Error: Could not be executed
    • Archived: Is effective

    User's reviews

    BIRKENSPANNER

    Germany

    ★★★★★

    Great App - Did just what I was looking for: The App anonymized the customer data of thousands of customers with one click! Solved a big issue as Shopify lets you only manually anonyize customer data one by one. Also, thanks for the quick and friendly support by the customer support by Paul.

    Greetings from Cologne, Germany

    Tim

    March 4, 2026Shopify

    L'Occitane Romania

    Romania

    ★★★★★

    Great customer experience, quick answer to solve the issues we encounter. Quick clients anonymization without the financial details. Hope Shopify will permit in the future an App to anonymize also this.

    October 21, 2024Shopify

    Pricing

    Check our pricing

    Basic

    10$

    • Customer data redaction in customer account
    • Customize privacy policy in checkout (Shopify Plus)

    Standard

    49$

    • Customer Data Redaction in customer account
    • Customizable privacy policy in checkout (Shopify Plus)
    • Third-party integration with Klaviyo and Gorgias

    Advanced

    89$

    • Customer Data Redaction in customer account
    • Customizable privacy policy in checkout (Shopify Plus)
    • Third-party integration with Klaviyo and Gorgias
    • Multi-criteria scheduled ans manual mass anonymization
    • Mass anonymization by file import

    Feature request

    Specific needs or any ideas of enhancements and new features to add to the extension? Tell us more, we'll get back to you shortly!

    Thank you

    That’s a wrap.

    We will get back to you as soon as possible.

    You may also like