Magento 2 GDPR Extension
version 2.0.0
tap to zoom
The Magento GDPR extension is aimed to make your website ready for the General Data Protection Regulation (GDPR). It helps
to protect the rights of both the merchants (data controllers) and Magento site visitors.
Ensures compliance with GDPR rules: the right to be informed, to erasure, to restrict processing, to object, to access personal
data.
Visitors can use Privacy Center dashboard to download or erase personal data, view Privacy Policy, Cookie Policy and contact
Data Protection Officer.
Merchants can enable cookie consent notice, view download and erasure requests, manage customer consents and setup notifications.
| Product Details | |
| Version: | 2.0.0 (Nov 05, 2020) |
| Documentation: | User Guide |
| Live Demo: | View |
| Code Visibility: | 100% Open Code |
| Supported CE - EE: |
CE 2.2.x - 2.4.x EE 2.2.x - 2.4.x |
| License: | Single Magento Installation |
| Support Plan: |
3 Months (Free), 6 Months, 12 Months |
| Refund Policy: | 60 Days (View) |
| Updates: | Free Lifetime Updates |
Key Features of Magento 2 GDPR Extension
This Magento plugin helps companies that do business in the European Union or offer goods or services directly to individuals in the EU to make their store compliant with major GDPR rules.
All-In-One GDPR Solution for Magento 2
- GDPR Magento 2 Extension introduces the Privacy Center Dashboard that was designed to display all GDPR options in one place.
- Customers can view your Privacy Policy and Cookie Policy, contact the Data Protection Officer (DPO), Update their Email Preferences, Download Account Data and Delete their Accounts.
- GDPR module integrates with your existing Privacy Policy, Cookie Policy and other CMS Pages and records a full history of changes (including document version, CMS page content, date and admin full name).
Download Customer Account Data
- Customers can download an archive of their account data (customer information, addresses, full order history, reviews, price and stock alerts, products in the cart, wishlist, compared products, etc.).
- Downloading customer information is a password-protected process that only customer will have access to. They will receive information in Spreadsheet (Excel, CSV) file format, which could allow another service to more easily import it.
- Admin can keep track of all download requests from Magento backend.
- Built-in API support allows you to download data from third party applications.
Permanently Delete & Anonymize Customer Account
- Customers can request to erase all personal information from your store permanently. Accounts will be automatically deleted within 24 hours after the removal request was submitted.
- Customers can cancel a removal request by logging in before the account is permanently deleted.
- Admin can view full log of account removal requests from Magento backend and cancel them if necessary.
- Built-in API support allows you to delete or anonymize data from third party applications.
Magento Cookie Restriction Notice
- Display a Cookie Restriction Notice at your Magento 2 store and conveniently edit notice text from the Magento configuration.
- The users will have a choice of whether to opt-in or not. Cookies will be used only after the user clicks on “Accept Cookies” button.
- GDPR module allows you to setup Google Tag Manager to prevent execution of your third party services before cookie consent is given.
Consent Management
- Add your consent checkboxes (such as "I agree to the Privacy Policy" or "I agree to the TOS", etc) on the registration page, checkout page and newsletter subscription page directly from the backend. You can also add consent checkboxes manually using our developer's guide.
- All customers who opted-in to these policies can be tracked via Magento consent log. Log of customer consents includes following data: customer name, email, consent location, link to the policy page, document version, date, IP, etc.
Geo Targeting
- Plumrocket GDPR now includes GeoIP functionality, allowing it to detect the country where your viewer is located and personalize the content for that viewer.
- Store owners can enable Cookie Notice and Consent Checkboxes to European Union visitors only and disable them for the rest of the world. Admin can configure this feature for each country separately or for all at once.
- Merchants who work with international clients will greatly benefit from the GeoIP restrictions in GDPR extension.
Popup and Email Notifications
- Schedule popup notifications and display a popup window to all customers upon successful login. Request customer consent to the updated versions of the "Privacy Policy", TOS, Cookie Policy or any other agreement.
- Notify users by email when their account data was successfully downloaded or a removal request created.
Built-in Support of Plumrocket Data Privacy Extensions
- Plumrocket offers a full set of data privacy extensions for Magento 2 - GDPR, CCPA, LGPD.
- GDPR Magento 2 Extension will work seamlessly with other Plumrocket data privacy extensions on the same Magento store, allowing your company to become compliant with all major data privacy laws.
- Whether your business is local or international, our extensions cover all major data protection regulations in the European Union and around the world.
Compatible with Custom & Third party Magento 2 themes
- Magento 2 GDPR module was designed to work flawlessly on any third party Magento 2 theme. Whether it is your custom theme or a popular theme like Ultimo, Shopper, Fortis, etc. – it supports them all.
- Compatible with the latest Community and Enterprise Editions of Magento 2 Ecommerce Platform.
Overview of Magento 2 GDPR Extension
GDPR module from Plumrocket is an all-In-one GDPR solution for Magento that comes with easy to use Privacy Center Dashboard and flexible admin settings to ensure GDPR compliance of your store.
All Features:
- NEW! GDPR Extension for Magento 2 is released!
-
Features for Customers
-
Privacy Center Dashboard
- Magento GDPR extension adds a new section in Magento Customer Account - “Privacy Center” with a list of GDPR options and Privacy FAQ.
- In Privacy Center dashboard customer can choose to view Privacy Policy, Cookie Policy, contact Data Protection Officer (DPO), Update Email Preferences, Download Account Data and Erase their Accounts.
-
Account Data Download
- Customers can download their account data as per GDPR Articles 15 and 20 – “Right of access” and “Right to data portability”. The data will be provided in both human-readable and machine-readable format (Excel, CSV). Customers can later transmit their personal data to another controller (ecommerce store or another location).
-
Account Data Removal
- Users can request to remove their personal data from your store. Article 17 of GDPR “Right to erasure (‘right to be forgotten’)” allows them to do so. Within 24 hours all personal data will be automatically deleted and anonymized if removal requests are not canceled by the Admin or a Customer.
- Customers can cancel data removal requests when they sign-in into their account within 24 hours after the data removal request was submitted.
- GDPR plugin will prevent customers with pending orders to delete account until all orders are completed or canceled.
- All account removal requests and data download requests are password-protected to ensure the security of customer accounts.
-
Cookie Restriction Notice
- As per “Recital 30” of GDPR, cookies “may be used to create profiles of the natural persons and identify them”, therefore the users must have a choice whether to opt-in or not.
- With Cookie Policy bar enabled, customers can choose whether to allow usage of all non-essential cookies. All essential cookies required for proper functioning of Magento store will continue to work. While all non-essential cookies, such as those used for analytics, cookies from advertisers or third parties, including affiliates and those that identify a user when he returns to the website will not be used until the consent is provided.
-
GDPR Consent & Opt-In
- Customers can provide consent to Privacy Policy, Cookie Policy or any other Policy on account registration page, checkout page and newsletter subscription pages.
-
Popup and Email Notifications
- Customers can be notified about any policy update via popup notification.
- Transactional emails are used to notify customers about all account removal requests and data download requests.
-
Privacy Center Dashboard
-
Features for Merchants
-
General Configuration
- Magento Admin can configure Privacy Center Dashboard, Account Removal Settings, GDPR Email settings, Consent Checkboxes, Cookie Consent Notice and Google Tag Manager settings.
-
Account Data Download
- The following data can be downloaded from Customer Account in CSV file format - customer Information, addresses, full order history, reviews, price and stock alerts, products in cart, wishlist, compared products, etc
- Additional information can be exported from Magento using provided API. Follow our developer’s guide if you need to include customer data from your third-party extensions in the downloadable ZIP archive.
- Admin can track all account download requests via “Log of Account Data Downloads” in Magento Admin.
-
Account Data Removal
- Magento order history will be anonymized and kept in database as “Guest Orders” for accounting purposes
- By default, GDPR extension will delete all personal data and anonymize Magento Orders. However, provided GDPR API allows to change default settings and anonymize all customer data instead of deleting it.
- Admin can cancel all pending data removal requests directly from the “Log of Account Removal Requests”.
- Admin can specify custom Anonymization Key to be used during the anonymization process of customer data.
-
Cookie Restriction Notice
- The extension uses Magento native “Cookie Restriction Mode” functionality to display Cookie Restriction Notice Block.
- Added functionality allows to conveniently change the Notice text and Button label from the backend. As well as display redesigned cookie bar in the bottom section of your site.
- Google Tag Manager can be used to load all non-essential javascripts only after the explicit consent to allow cookies is provided by the visitor.
-
GDPR Consent & Opt-In
- Article 7 of GDPR “Conditions for consent” requires that “the controller shall be able to demonstrate that the data subject has consented to processing of his or her personal data.” Therefore the Plumrocket GDPR extension allows admin to add custom consent checkboxes in multiple locations on Magento frontend and track all customer consents via “Log of Customer Consents” in the Magento backend.
-
GDPR Settings in CMS Pages
- Admin can continue using standard CMS Pages for Privacy Policy, Cookie Policy, Terms of Service or any other policy page.
- GDPR functionality will be automatically integrated in all CMS pages and can be enabled for each page separately.
- Admin can enable versions for specific CMS pages and view revision history.
- Admin can enable popup notifications and notify customers about policy updates upon successful login. This is useful when asking customers to agree to the updated version of the "Privacy Policy", TOS, Cookie Policy or any other agreement.
-
Popup and Email Notifications
- Admin can enable popup policy updates from CMS pages
- Extension intercepts all login & registration attempts via Social Login (Facebook Login, Twitter Login, or other social networks) and displays Popup Notification requiring customers to agree before using the website.
- Admin can configure GDPR Email settings from the configuration page. Choose email sender name, address and transactional email templates.
-
General Configuration
- 100% open code magento 2 extension
