A link or a simple bar that says “This site uses cookies” is not compliant, since the user must explicitly opt in to each cookie category.
When it comes to cookies though, Shopify has an option to limit tracking. I don’t know if it is on by default, but if Shopify does not track personal identifiable information with this option (and they say they don’t), then I don’t see how it isn’t compliant.
For third party apps like Google, Facebook etc., the person who installs and manages them is responsible.