GDPR and data deletion
Under the GDPR, you are the data controller for your visitors' data and Personizely is your data processor. Personizely gives you the tools to meet your obligations: a Data Processing Agreement (DPA) you can sign in the app, deletion of a person's data by email address, and automatic handling of Shopify's customer data requests. Our full GDPR statement is at personizely.net/legal/gdpr.
What data Personizely processes
Data | Where it comes from | Notes |
|---|---|---|
Visitor ID | A first-party cookie | Pseudonymous. See Cookies and consent |
Browsing activity | Page views, sessions, widget and campaign views, clicks, goals and events | Used for targeting, reports and attribution |
Device and source | Device type, browser, operating system, language, referrer, UTM parameters, entry page | Kept on their profile. Referrer and entry page are from the first visit; each UTM parameter keeps its latest value |
IP address and location | The request's IP address. Country, region, city and zip code are derived from it | On Shopify, the IP address isn't stored for visitors who decline analytics consent; location is still derived |
Contact details | What visitors submit in widget forms and surveys, or what you send with ply.identifyVisitor(): email, phone, name, consents and Custom fields | Only when the visitor submits it or you identify them |
Order data | On Shopify and Wix: order value, products, shipping and the store's customer ID, used to attribute purchases |
Integrations you connect, such as email platforms, receive the data you send them with automations, under your own agreements with those providers.
Delete a person's data
When someone asks you to erase their data:
- Go to Settings → GDPR.
- Under Delete visitor personal data, enter their email address and click Search.
- In the results (name, email address and IP address), click the delete button next to the matching contact.
Deleting removes the visitor's profile, including contact details, form answers and IP address, together with their recorded activity: page views, events, widget and campaign views and conversions. It can't be undone.
Repeat the search for each website in your account: every website keeps its own visitors. See Multiple websites.
Deleting in Personizely doesn't remove the person from tools you synced them to, such as Klaviyo, Mailchimp or your Shopify customers. Delete them there as well.
Shopify data requests
Shopify forwards privacy requests from your customers to installed apps, and Personizely handles them automatically:
Shopify request | What Personizely does |
|---|---|
Customer data erasure | Removes the customer's personal data (email, phone, name and IP address) from the matching visitor. Their anonymous activity stays in your reports |
Customer data request | Emails the account owner the data Personizely holds about that customer, so you can include it in your response |
Shop data erasure (after you uninstall the app) | Deletes the Personizely account when it's billed through Shopify |
The customer is matched by their Shopify customer ID or email address.
HubSpot deletions
If you've connected HubSpot, deleting a contact in HubSpot (including a GDPR deletion) also removes that person's personal data from their Personizely profile.
Visitor data export
To export the data held about your contacts, use Export contacts on a widget in the Widgets list. You get a CSV with each contact's profile fields. See Contacts and form submissions. For a single Shopify customer, the Shopify data request above emails you their data.
Data Processing Agreement
The DPA sets out how Personizely processes personal data on your behalf. You need it if you're in the EU or process EU residents' data.
- Go to Account → GDPR (owners and admins).
- Click Review and Accept and read the agreement.
- Enter Your full name, confirm you have the authority to accept on behalf of the data controller, and click Accept.
After acceptance, the page shows who accepted and when, and a Download button for a PDF copy. The DPA covers all websites in the account.
Behavior details and limitations
- Only contacts can be found. The search covers visitors with an email address. Anonymous visitors are identified only by a pseudonymous ID in their browser.
- One person, several profiles. Someone who used two devices, or several of your websites, can have more than one profile. Delete each match you find.
- Anonymous data stays in aggregate reports after a Shopify erasure request, without anything that identifies the person.
- Account deletion deletes your data. Terminating your account, or uninstalling the app for Shopify-billed accounts, deletes your websites and their visitor data. See Account, team and roles.
- Consent is configured on your site. See Cookies and consent for how Personizely follows Shopify's privacy settings and how to load it after consent elsewhere.