Magento 2 GDPR Extension - GDPR Compliance

Most-Trusted Pick

Work perfectly together
Cost-effective
60-day money back guarantee
FREE installation for all

$49 (~~$79~~)

GDPR $49 (~~$79~~)

Quick Order

$199

Reward Points

$99

-0%

Use Case

GDPR stands for General Data Protection Regulation. It is a data protection and privacy regulation in the European Union that aims to strengthen and unify data protection laws. GDPR governs the processing and handling of personal data and provides individuals with more control over their personal information. GDPR governs the processing and handling of personal data and provides individuals with more control over their personal information.

What are the regulations in GDPR?

Data security: Implement technical and organizational measures for secure data handling, including data breach notification within 72 hours.
Data protection by design and by default: Consider data protection principles in the design of products and activities.
Legal basis for data processing: Prohibit collecting, storing, and selling personal data.
Consent: Obtain clear and unambiguous consent from data subjects, allowing them to withdraw consent at any time.
Privacy rights: Data subjects have rights to be informed, access, rectify, erase, restrict processing, data portability, object, and rights related to automated decision making and profiling.

Business goal: Ensure legal aspects and prevent GDPR fines by facilitating data protection measures, consent management, and empowering data subjects with privacy rights, meeting all regulations in EU GDPR.
Default Magento 2 limitation: Risk of potential legal issues with severe GDPR fines of up to €20 million or 4% of the business's total annual revenue, whichever is higher.
Solution: Provide necessary features that help stores comply with the restricted GDPR:
- Collect data transparently by displaying a Terms and Conditions acceptance request.
- Manage consent by sending notifications and displaying requests before implementing any action related to the user's personal information.
- Ensure the right to erasure with the account deletion function.

Business goal: Strengthen customer relationships by respecting their privacy with various data-controlling features, allowing them to control their personal information actively.
Default Magento 2 limitations:
- Lose customers as they feel insecure and disrespected due to the absence of rights over their private information.
- Negatively impact brand reputation by lacking customer privacy protection.
Solution:
- Offer explicit consent options such as the request to accept Cookie Policy.
- Provide clear and concise privacy policies with the CMS Cookie Policy Page.

Business goal: Save time and effort by setting up a standard for automatic features and minimizing manual work for admins to have more energy for core business activities.
Default Magento 2 limitations:
- Cause the store's database to accumulate an abundance of inactive account information because of lacking an account auto-delete function.
- Waste time to check and send one by one notifications to inform customers of their account changes or problems.
Solution:
- Automatically delete inactive accounts after a particular time set by admins to remove abundant data.
- Customize auto email notifications to remind customers of their account status and the store's upcoming actions.

Magento 2 GDPR Highlight Features

Comply with GDPR by giving customers the right to remove their accounts

The right to erasure or the right to be forgotten is one of the mandatory regulations in GDPR. The EU GDPR organization explicitly indicates that all users must have the right to delete their data. Fortunately, the Mageplaza GDPR extension can meet that requirement by allowing several actions like deleting customers' accounts, anonymizing accounts in billing documents, and deleting data on abandoned carts.

Customers can actively delete their accounts along with all related information like addresses, phone numbers, etc, without waiting for admin's approval. Additionally, when a customer account is inactive for a certain time (set by the store owners), the system will automatically send a reminder email before deleting everything related to that account. After the warning a few days, the account will be removed with all its data.

Shoppers can anonymize certain information like Billing Address, Shipping Address after they delete the account in the order, invoice, shipment, and credit memo. Instead of inserting private information, clients can anonymise some values such as First name, Last name, Email address, and replace them with a random or chosen string of characters. Additionally, the GDPR extension also allow anonymising address attributes in Billing Documents (order, invoice, shipment, and credit memo), including Street, City, State/Province, Postcode, Telephone, First Name, and Last Name

AA great feature to safeguarding customer privacy and preventing potential data misuse. When customers delete their accounts, the system will automatically clears any abandoned carts associated with their accounts, ensuring that no sensitive data is retained for later unauthorized use. This helps businesses comply with GDPR regulations and build trust with their customers by showing a commitment to protecting their personal information.

Enhance Data Privacy and User Consent Management with GDPR Cookie restriction [Pro edition]

With the help of the GDPR module, users can enable several actions in Cookie restriction, such as: enforcing Cookie policy acceptance, customizing display options, selecting country-specific applications, customizing CSS, etc. In details:

After enabling the Cookie restriction mode, admins can turn on a request to ask for visitor acceptance on the store's cookie policy for special website features.

Store owners can choose where to put the internal link in Learn more of Cookie Text Message. After the customers click on the Learn more link, they will be immediately redirected to a CMS page that displays the detailed cookie policy version, providing comprehensive information on the customer data process.

The GDPR extension allows users to customize Cookie's position on the store's website depending on the admin's interest: Top/ Bottom of the page.

The currently available notice display type that is the most popular choice is the bar format.

The locations to apply Cookie restriction can totally be chosen by admins. At the moment, there are three options for the nations where the cookie policy applies: All countries, EU only, and Specific countries.

With the flexibility to use custom CSS, you can fully customize the cookie notice's appearance, tailoring it to match your website's design and style perfectly.

Improve customer experience by allowing to download personal data [Pro edition]

Mageplaza's GDPR extension allows the ability to empower customers, maximizing their capabilities while minimizing the admin's work. Customers can download their personal data with ease in CSV or Excel XML files, including:

Customers can download their personal data with ease in CSV or Excel XML files, including: website/ group/ store/ account/ customer ID, store view, first name and last name, email, time of creation and last update, and ability to change customer group status.

Constantly update customer account status with Email configuration [Pro edition]

All information about the customer account status will be informed automatically by confiuring Email notification. Thanks to this feature, admins can catch up with sudden changes like when customers delete their accounts. Simultaneously, shoppers will also get notifications reminding if their accounts are inactive for too long and can be deleted.

Users are able to configure automatic Email notification with the following actions:

When a customer has not logged in to their account for a particular time, their account will be auto-deleted. The store admin can set the number of days from the last login to define an inactive account and send a notification email to remind customers of their account situation a few days before deleting it.

If the accounts remain inactive after warning time, the system will auto delete them and send another Email to inform customers of their account removal. The deletion can NOT be undo.

A fantastic feature to keep admins informed whenever customers delete their accounts. Additionally, this function may help improve the overall store performance. For example, if the store owner makes changes that negatively impact the customer experience and many customers delete their accounts, it's obviously a clear signal for the brand to make timely adjustments to avoid losing more customers.

More features fre Magento 2 GDPR

Auto-delete customer account

Automatically delete inactive accounts after a certain time not logging in to remove abundant data.

Transparent account register terms

Display full customer Terms and Conditions when creating an account to show commitment for GDPR.

Password verification

Serious undo actions like deleting accounts require confirming password to ensure security.

Removal Requests

When a customer request to remove their account, the system will record that request to make sure that the account is properly deleted by his/her order and all the data is handled in compliance with GDPR regulations.

Reviews (33)

5.0 HELPFUL MODULE

13 October 2022

Leo Nguyen Verified Purchase

Walnut, United States

I bought GDPR extension recently and it's really nice and I'm really happy. My client happy too

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Recommended

29 April 2022

Cheryl Verified Purchase

Walnut, United States

I think all vendors should use this for hassle-free data privacy regulations problems. Simple installation and friendly support.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Simple and good support!

21 April 2022

Ky Nguyen Verified Purchase

Walnut, United States

Just exact what we need for our client's project to be launch in Hong Kong.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 VERY HELPFUL MODULE

19 April 2022

Salim Verified Purchase

Walnut, United States

I bought GDPR extension recently and it's really nice and I'm really happy. I had few issues at first but their team fixed it quickly. Thanks a lot!

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Must Have

15 January 2021

Pantelis Verified Purchase

Walnut, United States

A nice extension to be in compliance with GDPR. Easy and helpful. For the last project, I purchase the paid version and it is perfect! I had already used the free version on another project

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Great Extension and Support!

14 December 2020

Makoto Verified Purchase

Walnut, United States

This enabled us to have all the necessary functions to meet the recent EU privacy regulation. We had a small issue with the customer account deleting function but Mageplaza Customer Support did provide us with the code to fix it immediately. We will for sure come back here to get more.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 GOOD PRODUCT

16 October 2019

Agnes Verified Purchase

Walnut, United States

Thank you for developing this good extension, it is working very well. GDPR PRO extension is easy-to-use, straightforward, and clean & working as we expected.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Mageplaza one of the best partners for Magento

15 August 2019

Daniel Verified Purchase

Walnut, United States

We have purchased the Pro version. As an EU based company, we need to comply with GDPR regulations. As always Mageplaza has excellent customer service. We had some problems installing the extension, but Mageplaza are always very helpful and fast to help out.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Just saved me lots of time concerning on GDPR

08 June 2019

xdev Verified Purchase

Walnut, United States

Great extension that allows you to manage user information data, address info, delete them and it also allows you to delete user account! Excellent! I'll recommend this free module. 5 stars deserved.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 GDPR? Thanks EU!

17 April 2019

GOS Verified Purchase

Walnut, United States

Well, I guess I understand this EU law a little bit, but man they make it hard on us eCommerce owners... at least I thought they did. Enter MagePlaza GDPR extension. With a few clicks of the mouse, this FREE extension was setup and keeping us GDPR compliant. Another great FREE product from MagePlaza. Thank you guys!

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Nice

29 March 2019

WRC Verified Purchase

Walnut, United States

We have a lot of extension from Mageplaza. This extension is easy to use and working perfectly. Support is responsive as well, answering my questions quickly and with good details. It really should be part of Magento.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Excellent prouduct

17 March 2019

mohamed Verified Purchase

Walnut, United States

EXCELLENT extension and free extension. GDPR helped me reduce it to zero. Simple yet useful. Works perfectly without any issues. It works very fine with my Magento 2. Very useful extension, I recommended it to everyone.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Excellent

12 March 2019

Mohamed Verified Purchase

Walnut, United States

It works perfectly with my Magento. It is a very simple extension but extremely useful and essential. A great free version of the GDPR extension, most other companies charge for it. Thanks again

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Excellent extension plug in

10 March 2019

MOH Verified Purchase

Walnut, United States

AN EXCELLENT free version of the GDPR extension, IT WORKS VERY WELL WITH MAGENTO 2. VERY EASY TO INSTALL. VERY QUICK SUPPORT FROM MAGEPLAZE. THANKS AGAIN TO MAGEPLAZE TEAM.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 VERY SIMPLE TO SETUP

20 February 2019

Fullar Verified Purchase

Walnut, United States

We bought this extension a few months ago. Got a small issue while installing. Developers replied within an hour and we were set and running in less than half day.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Works like a charm

14 February 2019

S.O Verified Purchase

Walnut, United States

A great free version of the GDPR extension, most other companies charge for it. And it works as required, will be buying the full version shortly.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Good Product

11 February 2019

Suresh Verified Purchase

Walnut, United States

This extension is easy-to-use, straightforward, and clean & working as we expected. Easy to use Reasonable cost Also, the support is good I would like to recommend this product.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Perfect Basic GDPR

07 February 2019

Mahesh Verified Purchase

Walnut, United States

Thanks Mageplaza team for their support in every aspect. The module is working really well on our store and hasn’t had any problems so far. The fact that this extension is free gives no bad impacts on its quality indeed. I’m totally satisfied

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Works as supposed to

29 January 2019

Gabriel Armeanu Verified Purchase

Walnut, United States

I recommend this extension. It does exactly what is supposed to do! Any ecommerce site, Magento based that is, should have this extension installed. I know you may be more on the free extensions but, trust me, the paid extensions are much much better than the free ones, not only on Mageplaza, but anywhere on the internet.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 GDPR EU as always

03 January 2019

Marina Verified Purchase

Walnut, United States

GDPR compliance is obligatory for each server in EU. So if you are located in EU you should get this module asap or you risk hefty fines. Module installed flawlessly and works like a charm. Gives your clients all the tools needed by GDPR.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Very useful extension

02 January 2019

Panagiotis Verified Purchase

Walnut, United States

It is a very simple extension but extremely useful and essential. It works perfectly with my Magento 2.2.6.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Great extension

11 December 2018

Mihai Verified Purchase

Walnut, United States

This standard extension is working really well on our store and it is a great support with GDPR compliance, extremely useful and essential. I’m totally satisfied and I recommend this extension. Thanks Mageplaza!

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Very useful extension

10 December 2018

Mq Verified Purchase

Walnut, United States

Very great extension GDPR and useful, very easy installation and very simple. I recommend it to everyone, and the additional function of removing the address and the account was useful to our customers. Thanks

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Great extension

23 November 2018

Ashan Rajapaksha Verified Purchase

Walnut, United States

With this extension, now we can allow our EU customers in Magento Store to protect their private data according to GDPR Compliant and it comes at a reasonable price. This GDPR extension works perfectly on our Magento 2.2.5 store. For any kind of question regarding this extension, they give us a great support quickly and we would always appreciate that.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 GDPR

10 November 2018

Phil Verified Purchase

Walnut, United States

Thank you for your developing. It is a very simple extension but extremely useful and essential. It works perfectly with my Magento 2.2.6. And the cherry on the top of the cake, it is Free.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

4.0 Good feature

07 November 2018

Robert Verified Purchase

Walnut, United States

After enabling this module, the added features seemed good, but due to probably my theme, the alignment of the elements were a bit off. I will make some changes in the theme file but other than that, it seems to be a good feature for my website.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Great extension

26 October 2018

Alexios Verified Purchase

Walnut, United States

This is a handy extension. It is a must-have for stores that should be GDPR Compliant. Currently, we are on the standard version but we will update to Professional version soon, as it is a reasonable price. Thanks!

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Great support

12 October 2018

David Verified Purchase

Walnut, United States

At first, I didn't know how to install the premium functionality of the module, but after a short helpful conversation with their customer care team, I managed to install it anyway :D Great support! I would buy again!

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Perfect Basic GDPR

17 September 2018

Victor Verified Purchase

Walnut, United States

A simple and essential extension for this initial phase of GDPR with the possibility to update to Pro Version. There are no core problems. Also, it works perfectly on our Magento 2.2.2. Once again, thanks Mageplaza!

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Good extension

18 August 2018

Truong Verified Purchase

Walnut, United States

Thank you for developing this good extension, it is working very well. It helps reduce my time to complete the site. I hope you will have more good extensions in the future.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Great supports

29 May 2018

Raymond Verified Purchase

Walnut, United States

Thanks Mageplaza team for their supports in every aspect. The module is working really well on our store and hasn’t had any problems so far. The fact that this extension is free gives no bad impacts on its quality indeed. I’m totally satisfied

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Great extension

26 May 2018

Mary Verified Purchase

Walnut, United States

We realized that we had no better choice but to install a module which helps us comply GDPR and Mageplaza GDPR extension came on time. The basic features in the standard version are stunning, yet we are still looking forward to advanced features in the Pro version. Hope it’ll appear soon.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

5.0 Helpful basic features

24 May 2018

Fred Parrish Verified Purchase

Walnut, United States

We’ve just installed the standard version and yes it basically works. Our customers now have higher rights to protect their own personal information. I guess they deserve to feel peace of mind. Sooner or later, we have to obey the rules and comply GDPR so I guess this extension is our best choice at the moment.

Also installed: Automatic Related Products, Google Tag Manager, Advanced Product Feeds, Advanced SEO Suite

Feature Roadmap

All of the feature updates plan and status will be updated as soon as possible in our public Trello.

View Mageplaza Extension Roadmap 2023 ->

Don't see the features you are looking for?

Request feature

Want to do extension customization?

Custom request

Let us know your requirements

Name *

Email *

Title *

Customization Requirements *

Submit Request

Release Notes

Compatible with Magento v2.4.4

Supported Rest API & GraphQL

Supported Rest API & GraphQL

FAQs

Magento 2 GDPR extension is a tool that helps e-commerce stores comply with the EU General Data Protection Regulation by managing customers' personal data privacy and handling data access and erasure requests.

To allow the Mageplaza GDPR extension, follow these steps: From the Admin Panel, go to Store > Settings > Configuration > Mageplaza Extensions > GDPR > General configuration and turn the Enable to Yes. Follow our standard guide and pro guide for more details.

Absolutely! Using the GDPR extension brings businesses the ability to make all Terms and Conditions transparent, winning the customer's trust and loyalty. Our extension allows users to customize a Cookie request to ask customers whether they agree with the policy.

The answer is no. To prevent data misuse issues, customers are able to permanently delete their accounts with all their personal information, like names, addresses, phone numbers, ID card numbers, credit card information, and so on.

To optimize the effectiveness of GDPR, we highly recommend well-compatible modules such as SMTP and Store Credit.

Yes, the module includes Apply For Countries feature which allow users to apply the GDPR regulations on targeted groups of customer. There are 3 options: All Allowed Countries, All EU Countries, and Specific Countries.

Pricing

Choose your suitable edition.

Standard

$49 (~~$79~~) first year

Account Automatic Deletion
Account Deletion
Password Verification
Terms and Conditions Display
Data Anonymization

Professional

$99 (~~$129~~) first year

Includes all Standard features, plus ...
Customer Information Download
Cookie Restriction Mode
Cookie Accept Request
CMS Cookie Policy Page
Automatic Email
Countries Application
CSS Customization

General Configuration
	Standard	Professional
Allow Deleting Customer Account
Allow Password Verification
Allow Deleting Default Address
Show Customer Register Terms and Conditions
Auto-delete Customer Account
"Allow Downloading Customer Information"
Anonymise Account Configuration
Allow Deleting Data on Abandoned Carts
Allow Anonymizing Account in Billing Document - First Name Value
Allow Anonymizing Account in Billing Document - Last Name Value
Allow Anonymizing Account in Billing Document - Email Value
Allow Anonymise Address Option In Order Processing
Cookie Restriction
Enable Cookie Restriction Mode
Mandatory Request to accept Cookie Policy
CMS Cookie Policy Page
Choose Location to Show Cookie Law
Custom Notice Display Type
Apply For Countries - All Allowed Countries
Apply For Countries - All EU Countries
Apply For Countries - Specific Countries
Custom CSS
Email Configuration
Notification Email Before Deleting Account
Notification Email After Deleting Account
Notification Email to Admins when Customers Delete Accounts
Support
Auto-fit with every device (Mobile, Tablet, PC)
Support multiple stores
Support multiple languages
Fully compatible with Mageplaza extensions
1-year free support
1-year free update
60 days guarantee money back