Do you encrypt outbound data in flight? What encryption method do you use e.g. TLS 1.2 or 1.3?
Why there’s no answer to this important question? most partners trying to get GDPR into Shopify’s compliance should have an easy way understand the requirements and how to solve it.