メインコンテンツまでスキップ

Privacy & GDPR

Every Ecomplify storefront comes with built-in privacy tools: a cookie consent banner, tracking that respects visitors' choices, and self-service pages where customers can download or delete their data. Everything on this page is automatic — it works on every theme with nothing to enable.

The first time someone visits your storefront, a dark bar appears at the bottom of the page. It explains that the store uses essential cookies to work, asks permission for analytics (including session replays), and links to your store's Privacy Policy. The visitor has two choices:

  • Accept all — analytics and session replay are allowed, and start immediately.
  • Essential only — only the cookies needed to run the store (login, cart) are used.

The choice is remembered for one year, so returning visitors don't see the banner again. Visitors can change their mind at any time from the privacy page on your storefront.

Consent is opt-in

Until a visitor answers, Ecomplify behaves as if they chose Essential only. Nothing optional runs by default — this is what GDPR requires.

If a visitor chooses Essential only (or hasn't answered yet), the following stay off:

  • Session replay (Action Replay) — no recording is made of that visitor's session. Recording also stays off for visitors whose browser sends a "Do Not Track" signal, regardless of consent. See the Action Replay guide for what recordings contain (all typed input is always masked).
  • Personal visitor analytics — your traffic analytics still count the visit, but only as anonymous, aggregate data: no visitor identity is stored and the IP address is shortened so it can't identify a person.
  • Personalized recommendations tracking — product views are not linked to the signed-in customer, so recommendations aren't personalized for them. Anonymous product view counters still work.
  • Search analytics — search terms and result counts are still recorded anonymously, but they are not tied to the visitor's session.

What always works​

Choosing Essential only never breaks shopping. Signing in, the cart, checkout, and payments all work normally — these use essential cookies only.

Customer Data Rights​

GDPR gives your customers the right to see the personal data you hold about them and to have it deleted. Ecomplify handles both self-service, directly on your storefront — customers don't need to email you, and you don't need to do anything in the dashboard.

The customer privacy page​

Signed-in customers can visit /account/privacy on your store (for example yourstore.com/account/privacy) to manage their data. The page offers three things:

Download my data​

One click downloads a file containing everything the store holds about the customer: their profile (name, email, phone), saved addresses, and order history. This satisfies the GDPR "right of access".

A button that re-opens the cookie consent banner, so the customer can switch between Accept all and Essential only at any time.

Delete my account​

The customer ticks a confirmation box and clicks Delete my account. This:

  • Permanently removes their personal details — name, email, phone, password, and saved addresses.
  • Signs them out everywhere. The account cannot be logged into or recovered, and the email address can't be quietly re-registered to claim the old history.
  • Keeps past order records for legal and accounting reasons (taxes, refunds, disputes) — GDPR explicitly allows this. The orders are simply no longer connected to a usable account. The page explains this to the customer in plain words before they confirm.

Deletion is immediate and cannot be undone.

What You Should Do as a Merchant​

The tools above run on their own, but two things are worth checking:

  1. Keep your Privacy Policy up to date. The consent banner links to your store's Privacy Policy page. Edit it at Shop Settings > Policies — it should mention that you use analytics and session recording with the visitor's consent. See Shop Settings.
  2. Point customers to the privacy page. If a customer emails you asking for their data or for account deletion, direct them to sign in and visit /account/privacy on your store — the export and deletion there are complete and instant, with no manual work on your side.

Common Questions​

Do I need to set up the consent banner? No. It appears automatically on every storefront and every theme.

Will "Essential only" visitors hurt my analytics? You still see them in aggregate traffic numbers — you just won't get session replays or person-level detail for those visitors.

A customer deleted their account — are their orders gone from my dashboard? No. Orders are kept for your records; only the customer's personal profile is erased.

Can a customer undo a deletion? No. Deletion is permanent — the personal data is gone and the old account cannot be restored or signed into again.