GDPR and Data Tracking
Learn how GDPR affects your PlanetShopping store, what customer data can be collected, and how to manage tracking, cookies and personal information responsibly.
Purpose
If your business sells to customers in the European Union (EU), the General Data Protection Regulation (GDPR) may apply to your online store.
GDPR is designed to protect personal information and give individuals greater control over how their data is collected, stored and used.
PlanetShopping provides features to help merchants manage customer information responsibly, however each merchant is responsible for ensuring their business complies with applicable privacy laws.
What You’ll Learn
After reading this guide you’ll understand:
- What GDPR is
- Who GDPR applies to
- What customer data is considered personal information
- Cookie consent requirements
- Customer rights under GDPR
- Merchant responsibilities
- Best practices for compliance
What is GDPR?
The General Data Protection Regulation (GDPR) is a privacy law introduced by the European Union to protect personal information.
It applies to businesses that collect or process personal information relating to individuals located in the European Union, regardless of where the business itself is based.
What Information is Considered Personal Data?
Examples include:
- Name
- Email address
- Phone number
- Delivery address
- Billing address
- IP address
- Device information
- Customer account details
- Order history
- Marketing preferences
If information can identify an individual, it may be considered personal data.
Customer Rights Under GDPR
Customers have important rights, including:
✔ The right to know what information is collected
✔ The right to access their personal information
✔ The right to correct inaccurate information
✔ The right to request deletion of personal data (where legally applicable)
✔ The right to withdraw marketing consent
✔ The right to request a copy of their data
Merchants should have processes in place to respond to these requests promptly.
Cookies and Data Tracking
Many websites use cookies to improve functionality and understand visitor behaviour.
Cookies may be used to:
- Keep customers logged in
- Remember shopping carts
- Save preferences
- Measure website performance
- Analyse visitor behaviour
- Support marketing campaigns
Where required by law, visitors should be informed about the use of cookies and given appropriate choices.
Cookie Consent
Depending on your customers’ location, you may need to display a cookie consent banner before placing non-essential cookies on a visitor’s device.
This may include cookies used for:
- Analytics
- Advertising
- Personalisation
- Social media integrations
PlanetShopping supports privacy-focused website configurations, but merchants are responsible for configuring their stores to meet applicable legal requirements.
Merchant Responsibilities
As a PlanetShopping merchant, you should:
- Publish a clear Privacy Policy.
- Explain how customer information is collected and used.
- Collect only the information your business genuinely requires.
- Keep customer information secure.
- Honour customer privacy requests where legally required.
- Review your privacy practices regularly.
Good privacy practices build customer trust and support long-term business growth.
Best Practices
✔ Only collect information you genuinely need.
✔ Obtain consent where required.
✔ Keep customer records secure.
✔ Restrict staff access to personal information.
✔ Regularly review your privacy policy.
✔ Keep software and integrations up to date.
✔ Respond promptly to customer privacy requests.
Frequently Asked Questions
Does GDPR apply if my business is outside Europe?
It may.
If you sell products or services to customers located in the European Union, GDPR obligations may still apply.
Do I need a cookie banner?
Depending on the cookies your website uses and the jurisdictions in which you operate, you may be required to obtain consent before placing non-essential cookies.
If you’re unsure, seek legal advice.
Can customers ask for their information to be deleted?
Yes, in many situations customers have the right to request deletion of their personal information.
However, merchants may still be required to retain certain records for taxation, accounting or other legal obligations.
Is Google Analytics affected by GDPR?
Yes.
Google Analytics may require appropriate cookie consent and privacy disclosures depending on your implementation and where your customers are located.
Does PlanetShopping guarantee GDPR compliance?
No.
PlanetShopping provides features that support responsible data management, but compliance depends on how each merchant operates their business and configures their store.
Related Articles
Important Notice
This article provides general information about GDPR and privacy best practices.
It is not legal advice.
Privacy laws vary between countries and industries. Merchants should seek independent legal advice to ensure they comply with all applicable privacy legislation.
Ready to Learn More?
Understanding privacy regulations helps build customer trust and supports responsible business practices.
Continue with: CCPA and Data Sharing to learn about privacy requirements for businesses serving customers in California.