Shopify · Shopify Privacy Policy

California CCPA/CPRA Rights

Medium severity
Share 𝕏 Share in Share

Why it matters

California residents have stronger legal protections than most US users and can actively limit how Shopify uses and shares their data.

Consumer impact

Shopify collects a broad range of personal data — including contact details, payment information, browsing behavior, and purchase history — and may share it with third-party service providers, advertising partners, and affiliated companies. Consumer data may be transferred internationally, including to Canada and the US, with contractual safeguards in place for EEA and UK users. You can submit a data access, deletion, or portability request by visiting Shopify's dedicated privacy portal at https://privacy.shopify.com.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Visit https://privacy.shopify.com, select your rights request type (access, deletion, opt-out, or correction), confirm your California residency, and submit the form.

Applicable agencies

  • State AG
    The California Attorney General has enforcement authority over CCPA/CPRA violations by businesses operating in California.
    File a complaint →

Provision details

Document information
Document
Shopify Privacy Policy
Entity
Shopify
Document last updated
March 24, 2026
Tracking information
First tracked
March 15, 2026
Last verified
March 15, 2026
Record ID
CA-P-000808
Document ID
CA-D-00122
Evidence Provenance
Source URL
Wayback Machine
SHA-256
929225abb20671960ed1f40a6325a4c72cf5ea341e79aa8378056b3b66ef5708
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Shopify | Document: Shopify Privacy Policy | Record: CA-P-000808
Captured: 2026-03-15 11:22:02 UTC | SHA-256: 929225abb2067196…
URL: https://conductatlas.com/platform/shopify/shopify-privacy-policy/california-ccpacpra-rights/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document