Shopify, this question is for you...
If we have a website with European users, 'unambiguous, affirmative consent' to cookies is not optional. It's the law as per EU GDPR, with huge fines for non-compliance (or at best lots of time-wasting admin work if challenged on it).
Just like we can't run an online store without payment processing functionality, we can't run an online store selling to Europeans without a GDPR-compliant cookie consent mechanism.
So why does Shopify fob-off GDPR-compliant cookie consent to 3rd party developers?? This is core, non-optional functionality.
I've spent a lot of time looking at the 3rd party 'cookie bar/banner' offerings on the Shopify App Store:
Robust cookie consent should not be functionality that shop owners need to waste time searching Apps for. Or worse installing Apps that might be dangerously complacent, and indeed making their GDPR problems worse.
When is Shopify going to offer GDPR-compliant cookie consent as part of its core functionality?
You can reach out to our support team we could work on that, try our free application
but we can provide you satisfying solution though
I am starting a new shopify store in Feb 2021 and was also concerned about GDPR (for EU) and CCPA (for California).
Also, there are instructions for store owners (GDPR white pages) to contact shopify if a customer requests information about themselves or want to erase their data. I believe we go to the shopify admin, click customers, and click "request blah blah" which starts a process with shopify. I believe the instructions also mentioned that shopify sends this request to all the connected apps in our store (not sure about this one).
Any advice from shopify owners would be helpful. Thanks and take care.
I really hope @Shopify is looking into this, if only for their own bottom line. Merchants will be scared off if there is the slightest risk of getting one of these huge business ruining fines if they are not compliant.
It should be possible for Shopify to adjust the way app developers create apps and force them to add new steps where consent can (perhaps optionally) be obtained (or not) and cookies or other scripts can be then used (or not) depending on the user's answer. Of course, this will add work for the developers but there really is no other option if eCommerce on Shopify is to continue.
Same issue here: setting up the shop end of 2021 and cannot get fully GDPR compliant as Shopify is triggering cookies prior to consent (their script is read before mine so Cookiebot is too late to block them) and they send some data to a "not adequate" country (US).
I reached out to customer service but they are not really tackling the issue as they suggested that I install their customer banner app (which only shows a banner without taking any actions on the background to block cookies). Therefore, I insisted until they suggested that I talk to a "Shopify Expert" which costs between $50 to $1k just as a starting fee.
Honestly, I do not get why this is so complicated - I spent hours going on forums, trying different Cookie blockers apps, understanding GDPR regulations, etc. - and this should be a native functionality (at least for all the core functions - not the third party which are usually easy to block).
Please let me know if you have any information or found a solution.
I've already tried inumerous apps, November 2, 2021, and no signal of a perfect solution.
Does anyone knows if this this code works for shopify?
It's not full compliant, but at least we can inform and have full control of the css, and we can also add "if" for languages.