Skip to main content

​
Overview

The GDPR Requests page provides a log of all customer data requests your store has received from Shopify. Shopify generates these requests when customers exercise their data privacy rights under GDPR and similar regulations. Layers automatically processes these requests by locating and handling customer data across all storage systems, including search logs and analytics data.

​
Request types

There are two types of GDPR requests:
  • Data Request: A customer has asked to see what personal data is stored about them. Layers compiles the search queries tied to the customer and a count of matching records in each data store.
  • Redact: A customer has asked for their personal data to be deleted. Layers removes or anonymizes the customer ID in analytics tables, search request logs, search feedback, affinities, quiz responses linked to the customer’s sessions, and the customer’s prior GDPR request records. Once the redaction completes, Layers also replaces the customer ID on the redact request itself with an anonymized value. Copies in application logs and observability traces are not individually redacted and expire according to the vendor retention listed on the sub-processors page.

​
Request statuses

Each request moves through a lifecycle:

​
Steps

  1. Go to Settings → GDPR Requests in the Layers dashboard.
  2. You will see a table listing all GDPR requests, including the type, customer ID, status, and timestamps.
  3. Use the search bar to filter requests by customer ID. Requests for a customer whose data has been redacted show an anonymized ID, so searching for the original customer ID will not return them.
  4. Click View on any request to see its full details, including:
    • The request type and current status
    • The Shopify customer ID
    • When the request was received and completed
    • A data summary (for data requests) or redaction results (for redact requests) showing which data stores were affected
  5. If there are many requests, use the pagination controls at the bottom to navigate between pages.

​
Tips

  • Shopify sends GDPR requests automatically. You do not need to create them manually.
  • Failed requests include an error message in the detail view to help diagnose issues. Contact support if a request remains in a failed state.
  • Data summaries show the count of records found across search logs and analytics systems, along with the search queries tied to the customer. Redaction results show the count of records redacted in each data store.

​
Next steps