Start Strong
Sell Smart
Manage with Ease
Market to Success

Managing Privacy Settings and GDPR Compliance

SHOPLINE understands the importance of protecting personal information, which is essential for building your customers’ trust and confidence. That’s why we have designed our system to help you manage your customers’ personal data transparently. We are committed to providing a user-friendly solution that complies with global privacy and data protection regulations.

Though SHOPLINE will do its best to help you succeed, you still need to take a few measures. If you have any questions regarding the laws applicable to you or specific doubts in your businesses, please consult local lawyers who are familiar with data protection laws.

 

 

Setting the Customer Content Options

Though cookies have played a vital role in data analysis, individuation, and marketing, we need to acquire the customer's consent before collecting their data due to the laws of some countries/regions. Our system will collect the data required for purchasing operations in the online store and the checkout process (missing such data will result in website operation failures), regardless of whether the customer gives consent.

From your SHOPLINE admin panel, you can go to Online Store > Preferences > Customer privacy and find the option for setting a customer's permissions.

Notes: If you need the customer's permission to use their cookies, you need to install the GDPR-Privacy Banner. This setting will take effect when the customer is in the following countries/regions:

  • European Economic Areas (EEA): Belgium, Bulgaria, Croatia, the Republic of Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Liechtenstein, Malta, Netherlands, Norway, Austria, Poland, Portugal, Romania, Slovakia, Spain, Slovenia, and Sweden.
  • United Kingdom

SHOPLINE provides the following permission policies for you to choose as needed:

1.note.png

  • Collect all personal data by default: Collect cookies before getting the customer’s permission. This option indicates the maximum degree of data collection. If your customers are in the preceding countries/regions, this option may not be compliant with the data protection and privacy laws.
  • Collect partial personal data before getting the customer's permission: When a customer visits your store, the system will collect cookies to use for analysis. After the customer gives permission, the system will collect the cookies for individuation and marketing.
  • Collect personal data after receiving customer’s permission: As required by data protection and privacy laws, the system doesn’t collect cookies used for analysis, individuation, and marketing, unless the customer gives permission. This option complies with the requirements of GDPR but may reduce the data for analysis and marketing activities.

 

 

GDPR-Privacy Banner Application

The GDPR-Privacy Banner application can help you to be compliant with the applicable privacy laws. In this application, you can enable the cookie consent banner to be displayed or hidden in your online store. 

If you enable the banner, it will be displayed when customers from the United Kingdom or European Union visit your store. You can customize the banner background color, banner title, banner description, select button text, reject button text, privacy policy title, URL, and more. When you configure the above information, you can also preview the banner in real time.

 

Installing the GDPR-Privacy Banner Application

To install the application, perform the following steps:

  1. From your SHOPLINE App Store, find the GDPR-Privacy Banner application.
  2. On the application details page, click Install.
  3. Read the authorization requirements, and complete the installation.

After it’s installed, you can view and use this application in the Apps menu.

 

Uninstalling the GDPR-Privacy Banner Application

If you no longer need this application, perform the following steps to uninstall it:

  1. Go to Apps and browse/search to find the GDPR-Privacy Banner application.
  2. Click on the three-dot icon on the right side of the application and select App removal.
    2.2.2.png
  3. Click Delete in the pop-up dialog box.
    2.2.3.png

 

Visiting the GDPR-Privacy Banner Application

Go to Apps and browse/ search to find the GDPR-Privacy Banner application.

 

Customizing the Cookie Consent Banner of GDPR-Privacy Banner

This application provides the default options for the privacy cookie consent banner, which you can customize. You can configure the following options and view the banner in the preview area on the right:

2.4.1.png

  • Publish: You can choose to display or hide the banner
  • Exterior: You can choose the banner background template, such as dark or light
  • Content: Includes the title, banner description, accept button text, reject button text, privacy policy link title, and privacy policy URL
Note: We’ve created default content for you to be compliant with privacy laws, but the content could not apply to your specific businesses or regions. You need to determine if the default content satisfies your business requirements and modify it accordingly.

 

A real-time preview for the PC and mobile client is displayed on the right side of the window. You can also click Preview how this displays to open a browser tab page to view the online store opened from the customer's perspective.

2.4.2.png

 

EU General Data Protection Regulation (GDPR)

On May 25, 2018, the EU General Data Protection Regulation (GDPR) entered into force. Its application scope is extremely extensive. Any organization collecting, transmitting, retaining, or processing personal information involved in all member states in the EU shall abide by this regulation. 

SHOPLINE wants to help you comply with the law, and compliance with GDPR is the responsibility of every merchant.

 

Territorial Scope of GDPR

  • GDPR applies to organizations with or without business institutions in the EU, as long as these organizations process the personal data of the business institution's activities within the EU (regardless of whether the behavior takes place within the EU).
  • If an organization has no business institutions within the EU but processes the personal data of individuals within the EU, and the processing is related to providing products or services to individuals within the EU regardless of whether the products or services are charged, the GDPR applies.
  • GDPR applies to personal data processing of individuals within the EU by non-EU organizations, as long as the processing involves the monitoring of personal behaviors and takes place in the EU.

In general situations, the merchant is the controller of the customer data. Therefore, you’re responsible for collecting customer data and choosing the data processing method. Moreover, GDPR is a piece of EU regulation. However, it may apply to your businesses if you provide products and services in Europe, even if you or your enterprise aren’t within Europe.

 

GDPR Content Interpretation

  • An enterprise conducting illegal activities shall have to pay a fine amounting to up to 20 million euros or 4% of its global revenue, with the higher of the two taking precedence.
  • The website operator must clearly explain to the customers that the search and shopping records of customers will be recorded in advance and acquire the customer's consent. Otherwise, the involved activity will be considered illegal as "not informing and recording the user's behavior".
  • Enterprises can no longer use vague, incomprehensible language, or lengthy privacy policies to obtain data usage permission from users. 
  • The user's "right to be forgotten" is expressly stipulated. That is, the user can request the responsible party to delete the user's data records.