GoodAPI Plant Trees Clean Seas
Meets our highest standards for performance, design, and integration. Learn moreOpens in new window
Reviews (217)
Great concept, but not GDPR compliant.
As an EU merchant I discovered there was no Data Processing Agreement or sub-processor list in place, and hasn't been for 4 years.
Until proper GDPR compliance is implemented, this app is risky for EU merchants handling customer data.
Hi there, thank you for the feedback. We do have robust data handling policies in place but as part of your feedback, we have implemented the following changes
We have updated our terms and conditions as well as privacy policy to better document our GDPR responsibilities.
We have also now documented and created a standardized data processing agreement.
We also:
- Subscribe to and properly process Shopify’s GDPR webhooks (such as customer data access and erasure requests)
- Do not share or sell customer data with any third party
- Store data securely on Google Cloud infrastructure
Beyond documentation and tech improvements, internally, we have begun training for all our staff on GDPR and its benefits to our customers.
Thank you so much again for helping us improve as a company.