GDPR and Shopify: What Merchants Actually Need to Export and Delete

If you sell to customers in the European Union or California (CCPA), you've likely received automated GDPR webhooks from Shopify regarding Customer Data Request or Customer Redact.

Failing to comply with data privacy regulations can result in steep fines. However, many merchants struggle to understand how GDPR requirements interact with their cloud data backups.

Here is what you actually need to know about exporting and redacting customer data on Shopify.

The 3 Mandatory Shopify Privacy Webhooks

Shopify requires all installed apps to process three key privacy webhooks:
1. customers/data_request: A customer requests a copy of all personal data held by your store.
2. customers/redact: A customer requests permanent deletion of their personal data.
3. shop/redact: Sent 48 hours after a store uninstalls an app to request store data deletion.

How Backups Comply with GDPR "Right to be Forgotten"

A common compliance concern is: If a customer requests data deletion, does that break my automated backups?

Under GDPR guidelines, backup archives maintained for legal, financial, and disaster recovery purposes are permitted provided that:

• Backup data is securely encrypted in cloud storage (e.g. AWS S3).


• Restricted access protocols are enforced.


• If a backup archive is restored, customer deletion requests are automatically re-applied to the restored database.

How Woonic Handles Privacy & Data Isolation

Woonic Backup & Staging is engineered with privacy by design:

• Automatic Webhook Processing: Woonic listens to all official Shopify GDPR webhooks and redacts customer records instantly.


• S3 Server-Side Encryption: All store snapshots are encrypted using AES-256 standards.


• Data Export Utilities: Export clean, formatted JSON or CSV customer reports whenever requested.

Learn how to safely clone store environments without copying customer data in our guide to cloning Shopify stores securely.

Stay Compliant & Secure

Keep your store safe from data loss and privacy fines with Woonic Backup & Staging!