What data should my app delete on receiving customers/redact

[ShrutiM]

Hi,

I am working on GDPR requests, refer link: https://shopify.dev/tutorials/add-gdpr-webhooks-to-your-app

I am confuse about the customer/redact request, what data exactly should I delete.

I can get 2 different type of payloads:

1. Payload containing customer info and order ids

{ “shop_id”: 954889, “shop_domain”: “snowdevil.myshopify.com”, “customer”: { “id”: 191167, “email”: “john@email.com”, “phone”: “555-625-1199” }, “orders_to_redact”: [299938, 280263, 220458] }

2. 1. Payload containing only contain customer’s email address.

So my understanding is that I need to remove customer data from my app in both cases 1 and 2.

And in 1 I need to delete orders present in “orders_to_redact” field.

Is this correct? As the information in the link is not clear

[Morek]

Hi @ShrutiM

Hope you’re having a great day!

As specified by Shopify:

So my understanding is that I need to remove customer data from my app in both cases 1 and 2.

Yes!

And in 1 I need to delete orders present in “orders_to_redact” field.

You should contact Shopify Partner support to be sure. Reach out to support through the support page in the Partner Dashboard.