GDPR Compliance Magento 2 Extension

EU’s General Data Protection Regulation is serious stuff that needs to be looked at by every company selling online. Merchants can't ignore this due to the fact that they're high on Penalties for breaching. With our Magento 2 GDPR tool, you to comply with various Checklist of EU’s GDPR for Magento 2 store.

This GDPR module opens customers to access their right to control, delete, access to their personal data. At the same time, It allows merchants to manage their privacy policy consent & requests privacy consent from users.

Manage Account with (Delete, Download & Erase action)

Admin can configure each of these request processing immediately, awaiting admin approval or auto-mode.

Delete Account:

According to the GDPR regulation, a user should have an option to delete an account permanently. This Magento 2 GDPR compliant plugin empowers users to delete an account from the new “My Account > Manage Account” page. Is sent out the requested email & ensures action to authorized user only? this kind of request is securely handled by this plugin.

Download Personal Data:

This extension fulfils the website or store with an EU’s “right to access” rule. The users can request for data download on the “My Account > Manage Account page”. This will export all user’s own personal info, sales history, invoicing etc. into the CSV format. Once the download is ready, a downloadable attachment link will be sent to the user’s verified email address.

Erase/Anonymize Account Data:

To comply with erase data action, this Magento2 plugin adds an option to erase/anonymise user data. With these rights, they can replace customer personal data, sales history with placeholder text in the database which hides customer's information.

Each of these data-related requests (delete, erase & download) allows 3 modes of servicing enhancing flexibility and security:

• By Customer
• Auto
• By Admin
  
  

By Customer mode, the email will be received by the users on their requests for taking an action e.g. to delete or access their data

With the Auto mode, whenever a request raised & completes the email verification by the customer. All received requests will then be automatically fulfilled on based of cron set by the admin. After all, the email will be sent to the relevant customers, using an email user can take control for account data actions.

In By Admin mode, when a request raised by the user, the admin receives all request on his dashboard and when the admin approves the request then a mail is sent out to the customer who then takes relevant action to complete their request. This method is used to ensure more security.

Privacy Consent Management

A GDPR compliant plug-in for Magento 2 also sets cron job for automatically truncate abandoned carts from the quote table repeatedly. The admin can set this frequency on the backend via cron settings.

EU regulation includes, customer privacy consent should be asked before accessing their personal information. Also, it should be clear with privacy document that when & where your information going to be used. The admin can integrate upto 3 consents. If the users haven’t accepted consents it will appear on the registration page and/or checkout page. A user can anytime update this consent value by going into a dedicated Privacy Policy page in "My Account" area.

Admin will be presented with 2 separate user consents grids loading users who accepted consents & customers pending privacy consents. Admin can reset previously recorded users consent to run through new privacy terms. The customer then has to give their consents again with new privacy updates.

Magento 2 GDPR Cookie Consents

Our Magento plugin enables cookie consent with a customized popup at the top or bottom of the screen to the user.

Important notice: This extension designed to the best of our knowledge and understanding of the EU’s GDPR rule. It will surely help eCommerce merchants to ready their store or website with this compliance. However, please consult your lawyer to confirm compliance accordingly.

GDPR Compliance Extension Set up:

1. To use this extension, go to STORE> Configuration > SETUBRIDGE > GDPR Compliance Tab:
2. Check more info on extension installation instruction here.

Extension Configuration: