GDPR: cookies, consents and customer requests

The cookie bar, the record of consents and how to handle customer requests to export or delete their data.

⏱ 6 minBeginnerUpdated 8 Oct 2026

The module takes care of three things: the cookie consent bar, a record of all consents (cookies, newsletter, forms) and customer requests about their personal data.

Stores › Configuration › Swissup › GDPR

  1. The Cookie Consents group contains Enabled and Lifetime, days (how many days the shop remembers the customer's choice).

  2. In the same group, Cookie Settings Page has a URL field with the link to your cookie page. If you rename that page, update the address here too.

  3. The Personal Data Consents group defines the consents customers confirm in forms, such as Privacy Policy and Terms and Conditions. For each one, set whether it is enabled and in which forms it appears.

  4. Click Save Config.

We set up the connection to Google Analytics, Meta and other tools (Integrate with Google Consent Mode) for you. If you add a new tracking tool, write to us so we can tie it to consent.

The list of cookies your shop uses is in Swissup › GDPR › Cookie Registry. Add a new cookie with Register New Cookie.

Consents

Swissup › GDPR › Accepted Consents

This list shows who gave which consent and when (for example for the newsletter or a form). It is your proof if the data protection authority ever asks, so do not delete these records.

Customer requests

Swissup › GDPR › Client's Requests

In their account, a customer can ask for their data to be exported or deleted. The request appears in this list.

  1. Open the request and check whether the customer has open orders or unpaid amounts.

  2. If Automate request processing is switched on in the configuration (group Client's Requests), the deletion runs by itself after the number of days set in Days to wait. Until then the customer can cancel the request.

  3. When data is deleted, the shop replaces the personal details in orders with anonymous ones (Anonymized data placeholder). The orders stay for your accounts.

You must reply to a customer's request within one month at the latest. If a request arrives by email, you can handle it the same way: ask the customer to submit it in their account, or write to us.

Common problems

The cookie bar does not appear

The customer has already made a choice; it is valid for as many days as are set. Check in a private browser window.

Analytics is not recording visits

The visitor has not consented to analytics cookies. This is expected; the share of refusals depends on the design of the bar.

Was this article helpful?

Related