GDPR Compliance Status

Yes, GDPR Ready

Customer History is built with GDPR compliance in mind and includes all necessary features to help you comply with EU data protection regulations.

Key GDPR Features

Built-in compliance tools:

  • Consent Management: Cookie consent integration
  • Data Export: One-click customer data export
  • Right to Deletion: Complete data erasure
  • Data Portability: Export in machine-readable formats
  • IP Anonymization: Optional IP masking
  • Audit Logs: Track data access and changes

Article 13 & 14: Right to Information

Customer History helps you inform users about:

  • What data is collected
  • Why it’s collected (legitimate interest)
  • How long it’s stored
  • Who has access to it

Your responsibility: Update your privacy policy to include Customer History tracking.

Article 15: Right of Access

Customers can request their data:

  1. Go to Customer Profile
  2. Click Export Customer Data
  3. Choose format (CSV, JSON, or XML)
  4. Download complete data package

Exported data includes:

  • All browsing sessions
  • Product views
  • Search queries
  • Cart activity
  • Purchase history

Article 17: Right to Erasure

Complete data deletion:

  1. Go to Customer Profile
  2. Click Delete Customer Data
  3. Confirm deletion
  4. All tracking data permanently erased
Note

WooCommerce order data is handled separately by WooCommerce’s GDPR tools. Customer History respects WooCommerce erasure requests.

Article 20: Right to Data Portability

Machine-readable export formats:

  • CSV: Spreadsheet compatible
  • JSON: Developer-friendly
  • XML: Universal format

Data can be imported into other systems.

Cookie consent integration:

  • Works with popular consent plugins
  • Respects “Do Not Track” browser setting
  • Can disable tracking before consent
  • Revoke consent option available
  • CookieYes
  • Complianz
  • Cookie Notice
  • GDPR Cookie Compliance

IP Anonymization

Privacy-friendly IP handling:

  • None: Store full IP (192.168.1.100)
  • Partial: Mask last octet (192.168.1.XXX)
  • Full: Don’t store IP addresses

Enable in Settings → Privacy → IP Anonymization

Data Retention

Automatic data cleanup:

  • Set retention periods (30, 60, 90 days, or custom)
  • Auto-delete old session data
  • Archive instead of delete option
  • Manual cleanup tools available

Configure in Settings → Data Management

Data Processing Agreement

Important clarification:

You Are the Data Controller
  • Customer History stores data on your server
  • No data sent to third parties
  • You control all data
  • No DPA with PureDevs needed

WordPress Privacy Tools Integration

Works with WordPress privacy features:

  • Integrates with Tools → Export Personal Data
  • Integrates with Tools → Erase Personal Data
  • Adds Customer History data to WordPress exports
  • Respects WordPress privacy requests

GDPR requires a legal basis. Customer History supports:

Legitimate Interest (Most Common)

Improving customer experience and store optimization

For marketing emails and non-essential tracking

Contract

Processing necessary to fulfill orders

Your responsibility: Document your legal basis in privacy policy.

GDPR Checklist

Steps to ensure compliance:

  1. ✓ Update privacy policy mentioning tracking
  2. ✓ Add cookie consent banner
  3. ✓ Enable IP anonymization (if desired)
  4. ✓ Set data retention periods
  5. ✓ Test data export functionality
  6. ✓ Test data deletion functionality
  7. ✓ Train staff on GDPR requests
  8. ✓ Document legal basis for processing

Other Privacy Regulations

Also helps comply with:

  • CCPA: California Consumer Privacy Act
  • LGPD: Brazilian data protection law
  • PIPEDA: Canadian privacy law
  • UK GDPR: Post-Brexit UK regulations

Disclaimer

Legal Notice

This plugin provides tools to help with GDPR compliance, but ultimate compliance is your responsibility. Consult with a legal professional to ensure your specific implementation meets all requirements. PureDevs is not a law firm and cannot provide legal advice.