Shopify · Shopify Privacy Policy

GDPR Rights for EEA and UK Users

Medium severity
Share 𝕏 Share in Share

Why it matters

EEA and UK users have legally enforceable rights to control their data, and Shopify is required to respond to these requests within one month.

Consumer impact

Shopify collects a broad range of personal data β€” including contact details, payment information, browsing behavior, and purchase history β€” and may share it with third-party service providers, advertising partners, and affiliated companies. Consumer data may be transferred internationally, including to Canada and the US, with contractual safeguards in place for EEA and UK users. You can submit a data access, deletion, or portability request by visiting Shopify's dedicated privacy portal at https://privacy.shopify.com.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Visit https://privacy.shopify.com and submit a data portability or access request. Shopify is required to respond within one month under GDPR/UK GDPR.

Applicable agencies

  • State AG
    For UK users, the Information Commissioner's Office (ICO) has jurisdiction; EU users should contact their national supervisory authority. State_AG is the closest available proxy for regional authority.
    File a complaint →

Provision details

Document information
Document
Shopify Privacy Policy
Entity
Shopify
Document last updated
March 24, 2026
Tracking information
First tracked
March 15, 2026
Last verified
March 15, 2026
Record ID
CA-P-000809
Document ID
CA-D-00122
Evidence Provenance
Source URL
Wayback Machine
SHA-256
929225abb20671960ed1f40a6325a4c72cf5ea341e79aa8378056b3b66ef5708
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Shopify | Document: Shopify Privacy Policy | Record: CA-P-000809
Captured: 2026-03-15 11:22:02 UTC | SHA-256: 929225abb2067196…
URL: https://conductatlas.com/platform/shopify/shopify-privacy-policy/gdpr-rights-for-eea-and-uk-users/
Accessed: April 4, 2026
Classification
Severity
Medium
Categories

Other provisions in this document