Overview
Shopify provides built-in tools to help merchants comply with GDPR data subject requests (such as customer data access requests or deletion requests). When you use Shopify’s GDPR features to either retrieve a customer’s data or erase it, Shopify’s system automatically notifies any third-party apps installed on your store (including KnoCommerce) about the request.
KnoCommerce is fully integrated with this automatic GDPR request handling. In fact, any GDPR request submitted through Shopify will also trigger the same request in KnoCommerce’s platform – as a Shopify app partner, KnoCommerce is required to automatically process those requests and remove or provide data as needed.
In short, you can manage GDPR requests from your Shopify admin, and KnoCommerce will seamlessly comply in the background.
Submitting a GDPR Data Request in Shopify
To learn more about Shopify's most recent methods of handling customer data requests, please see their help article.
How KnoCommerce Handles GDPR Requests
KnoCommerce is designed to comply with GDPR requests without any extra steps from you.
As an example, here's what happens in KnoCommerce when a GDPR request is submitted via Shopify:
Data Deletion Requests: If you initiated an erasure, Shopify will forward a deletion request to KnoCommerce. Upon receiving this request, KnoCommerce will automatically erase the customer’s personal data from our systems to comply with GDPR. This includes any personally identifiable information collected through post-purchase surveys that can be linked to that customer. In many cases, the deletion in KnoCommerce happens almost immediately when the webhook is received. You don’t need to manually intervene – the app’s GDPR compliance processes take care of removing the data and ensuring it’s no longer stored on KnoCommerce servers.
Importantly, no separate action in the KnoCommerce app is required by you. Shopify’s GDPR system and KnoCommerce’s integration handle everything behind the scenes.
Shopify’s Official GDPR Documentation
For further reading and official guidance, you can refer to Shopify’s documentation on GDPR and data requests. Shopify’s help center has an article on processing customer data requests which outlines how to use the Request customer data and Erase personal data functions in your admin, and what happens after you submit those requests.