skills.rest
tomtoto757
tomtoto757COMMUNITY
Explore all skills by this author →
GitHub

gdpr-ecommerce

Implements GDPR compliance workflows for e-commerce stores including consent, data export, and erasure.

3|1|Updated Mar 21, 2026
Search Tags:#compliance#GDPR#data privacy#right to erasure#e-commerce#cookie consent#subject access request
One-click install
npx skills add https://github.com/tomtoto757/ecomm-ai-team --skill gdpr-ecommerce-tomtoto757
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gdpr-ecommerce
Source: https://github.com/tomtoto757/ecomm-ai-team/tree/main/skills/platform-integrations-infrastructure/finsilabs/security-compliance/gdpr-ecommerce
Command: npx skills add https://github.com/tomtoto757/ecomm-ai-team --skill gdpr-ecommerce-tomtoto757

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? E-commerce stores serving EU/UK customers must comply with GDPR requirements like cookie consent, Subject Access Requests, and right-to-erasure, but implementing these correctly across platforms like Shopify, WooCommerce, and BigCommerce is complex and error-prone, with fines up to €20M or 4% of global turnover for non-compliance. ## Core Features & Use Cases - Cookie Consent Management: Configure consent banners and consent-aware analytics on Shopify, WooCommerce, and BigCommerce, with GA4 consent mode defaults set to denied. - SAR and Erasure Pipelines: Handle data export requests within 30 days and anonymize customer PII while retaining order records for tax obligations. - Marketing Consent Enforcement: Record opt-in metadata (IP, timestamp, consent version), gate marketing emails behind explicit consent, and provide one-click unsubscribe. - Use Case: A customer submits a deletion request. Use this Skill to build a TypeScript erasure pipeline that checks pending orders, anonymizes PII in orders, logs an audit record, and notifies Klaviyo, Zendesk, and loyalty platforms to purge their copies. ## Quick Start Use the gdpr-ecommerce skill to implement a GDPR-compliant cookie consent banner with GA4 integration for my Next.js storefront.

Frequently Asked Questions about gdpr-ecommerce

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I make my Shopify store GDPR compliant?▼

Shopify GDPR compliance uses the free Privacy & Compliance app for cookie consent, the Customer privacy settings for data request webhooks, and the built-in Erase personal data action on customer profiles. You also need DPAs with vendors like Stripe and Klaviyo.

How to handle a GDPR right to erasure request in WooCommerce?▼

WooCommerce erasure requests are handled via Tools → Erase Personal Data in WordPress. After the customer confirms by email, WordPress and WooCommerce anonymize the account and order PII while preserving financial records for the statutory tax retention period.

Does GDPR allow deleting order records when a customer requests erasure?▼

No, order records must be retained for the statutory tax period of 5-7 years. The correct approach is to anonymize personal fields within orders, replacing name, email, and phone with placeholders, rather than deleting the order row.

How do I integrate Google Analytics 4 with a GDPR cookie consent banner?▼

GA4 consent integration calls gtag consent default with analytics_storage, ad_storage, ad_user_data, and ad_personalization set to denied, plus wait_for_update. When the user grants consent, call gtag consent update to set the relevant storage flags to granted.

What metadata must be stored for GDPR marketing consent?▼

GDPR marketing consent records must include the IP address, timestamp, consent text version, and opt-in method such as a checkbox or signup form. Pre-ticked boxes are prohibited, and every marketing email needs a one-click unsubscribe link.

What are the limitations of BigCommerce for GDPR data requests?▼

BigCommerce has no built-in SAR tool, so data exports require manually extracting customer data via the Customers API and Orders API and packaging it as JSON or CSV. Third-party services like Transcend or Mine can automate request handling.

Related Skills

Explore More Legal & Compliance Skills→
sandeepmvlsandeepmvl
21

gdpr-rails

Implement GDPR workflows for Ruby on Rails applications processing EU personal data.

Community
Advanced
sourcelabbgsourcelabbg

arf-topic-lm-data-deletion-and-wrp-reportin-part-1

Guide users through data erasure requests and WRP reporting in the EUDI Wallet ecosystem.

Official
Intermediate
SylphxAISylphxAI
4

privacy

Enforce consent-gated analytics and third-party integrations with GDPR/CCPA-aligned data handling.

Official
Basic
tomtoto757tomtoto757
3

gdpr-ecommerce

Implements GDPR compliance workflows for e-commerce stores including consent, data export, and erasure.

Community
Advanced