- Short answer
- No — Shopify gives you the erasure tools and notifies your apps, but you generally stay the controller who must answer the customer.
- Shopify's role
- Processor: it follows your instructions rather than deciding, which is why the deadline is yours and not its.
- Deadline
- One month from receipt under GDPR Article 12(3), extendable by two further months where necessary.
- The 72-hour rule
- No official page we read states a 72-hour deadline to confirm a request; 72 hours is the breach rule.
- What the button leaves
- Name and address go; the sale and its date stay, and Shop or Shop Pay data is untouched.
- Apps and other companies
- Installed apps hear from Shopify 10 days after you submit; contacting other companies you shared data with is yours.
- When deletion is blocked
- Shopify's Manage customers page lists four conditions blocking deletion, orders among them; erasing personal data is the separate route.
- Scope
- The EU GDPR text and Shopify's own documentation; other privacy regimes are not inventoried here.
- As of
- Shopify pages and GDPR text read August 31, 2026; admin limits rechecked September 1; erasure timing October 17, 2026.
Who has to answer the customer, you or Shopify?
You do, and Shopify says so itself. Its GDPR page, read August 31, 2026, splits the two roles before any tool is opened.
You're generally the controller of your customers' data.
That word — generally — is Shopify's hedge, not ours: the page stops short of an unconditional rule. The other half of the same page describes the processor side: when Shopify acts as a processor for your customers' data, it follows your instructions on how to handle that data. That is an actor waiting to be told, not one deciding on its own.
Everything below follows from that split. The deadline runs against you, and the next two sections cover the two mechanics that split produces: a button you press, and a webhook Shopify sends to your installed apps on its own schedule.
What the erasure button in your admin actually removes
The admin has a purpose-built request, and it removes less than most merchants expect. From your Shopify admin you click Customers, open the customer profile, then More actions > Erase personal data.
| Data | What an erasure request does to it |
|---|---|
| Customer name and address | Erased — Shopify states it erases personal data such as your customer's name and address. |
| What was sold, and the date and time of the sale | Still visible in your admin after the erasure. |
| Data from the customer's relationship with Shop and Shop Pay | Not erased — the request does not reach it. |
Three things the table does not show. Erasing a customer's personal data is not the same operation as deleting a customer profile, which has its own blocking conditions further down this page. The request is also reversible for a short while: after you submit it, you have 10 days to cancel.
The third is a caution Shopify flags: for a customer with active pre-authorized payments such as pre-orders or subscriptions, the remaining payments aren't charged and subscription contracts are canceled, and you incur a loss on those partial sales if the customer doesn't pay the remaining amount before the erasure request is submitted.
Whether a customer profile you delete outright can ever be brought back is a different question, and our store-backup guide answers it in one section.
Installed apps get notified; everyone else you shared the data with is on you
Copies of the same customer sit outside Shopify, and the admin request does not travel to them by itself. For installed apps there is a mechanism, documented for developers rather than for you.
Store owners can request that data is deleted on behalf of a customer. When this happens, Shopify sends a payload on the customers/redact topic to the apps installed on that store.
Read that as notification, not proof, and not an immediate one. Shopify's developer changelog says that as of March 23, 2026, erasure requests are processed 10 days after the request was submitted, regardless of when the customer's most recent order was placed; a recipient of a scheduled gift card stays pending until the gift card is delivered. The changelog does not mention apps; the developer page ties the customers/redact payload to the same 10-day mark. Shopify then tells the developer to complete the action within 30 days of receiving the request, and what the app does with it happens on the app's side.
Shopify's own pages don't yet agree. The developer page quoted above, read October 17, 2026, still describes the older hold of up to six months for a customer with a recent order, while the changelog entry is later. Plan on the 10 days, and if an app developer works from the older page, send them the changelog entry.
A second topic, customers/data_request, fires when a customer asks for a copy of their data instead — a different request with a different webhook. Which data an app can hold in the first place is its own answer.
Everything else is manual. Shopify states plainly that it is your responsibility to contact any other companies that you have shared the customer's personal data with — your email platform, your accountant, the spreadsheet someone exported last quarter. GDPR Article 19 says the same thing from the legal side: the controller communicates the erasure to each recipient the data was disclosed to, unless that proves impossible or takes disproportionate effort.
How long you actually have to respond
The deadline that counts is the legal one, and it starts the day the request reaches you rather than the day you open the admin — and which law you are counting under sets both the number of days and what has to happen inside them. Shopify's own numbers each have a different owner, and the app's 30 days start only after Shopify's 10, so together they can run past that deadline.
The month on that timeline is the GDPR's. A request under California's CCPA goes through the same erasure tool on a deadline of its own.
When deleting the profile is blocked — and what you erase instead
Sometimes the honest reply is that the profile stays. Shopify blocks deleting a customer under four conditions, read in full on September 1, 2026:
- The customer has pending redaction because of a GDPR erasure request.
- The customer is the recipient of a scheduled gift card that hasn't been delivered yet.
- The customer has ever had a subscription.
- The customer is associated with one or more orders.
The last one covers almost every real customer, which is why erasing personal data is the route that actually runs. The law expects that outcome: GDPR Article 17(3) disapplies erasure to the extent that processing is necessary for compliance with a legal obligation which requires processing by Union or Member State law to which you are subject, and to the extent that it is necessary for the establishment, exercise or defence of legal claims.
How many years those records must be kept is not something to look for in the Regulation. The full GDPR text we read on August 31, 2026 names no number of years for accounting or tax records; that period comes from national law, and this page does not inventory it. For a store in Germany, the periods are their own answer.
This page was written by AI. Separate AI agents that did not write it check its figures and claims against official sources and test its links and interactive tools. A human editor sets the site's editorial direction, topics and rules and checks that pages are complete and display correctly, but does not check their facts or edit their text. Details may change — always confirm critical data at shopify.com.
Editorial Policy