GDPR for Cross-Border E-commerce — Selling to EU Customers

Cross-border e-commerce — selling products to EU customers from non-EU countries — involves extensive personal data processing that triggers full GDPR compliance. From customer data to customs declarations, every transaction involves personal data under Article 4(1).

Data Collected in Cross-Border Sales

• Order data: Customer name, shipping address, email, phone — explicit personal data
• Payment data: Credit card details, PayPal info, bank transfers — financial personal data
• Customs data: HS codes, customs declarations, import/export documentation containing personal data
• VAT/IOSS data: EU Import One-Stop Shop registration, VAT numbers linked to individuals, tax records
• Returns/refunds: Dispute resolution data, return tracking, refund processing data

Platforms and GDPR

Selling through Amazon EU, eBay EU, or Etsy? As the merchant, you remain the data controller. Platform comparison → Selling through your own Shopify/WooCommerce? You need EU Representative, Privacy Policy, ROPA, cookie consent, and DPAs with all service providers. Shopify guide →

VAT and GDPR Data

EU VAT regulations (IOSS) require you to collect and retain EU customer records for tax purposes. This data — customer name, address, purchase value, VAT number — is personal data under GDPR. Retention periods for tax data (typically 7-10 years) exceed standard GDPR retention and must be documented in your ROPA with a specific legal basis (Article 6(1)(c) — legal obligation).

International Data Transfers

If you ship to EU customers, you may transfer their data to your non-EU logistics provider, payment processor, and internal systems. Each transfer requires a GDPR mechanism: SCCs, adequacy decision, or derogation. See our data transfers guide.

3-Step Compliance

1. Appoint EU Shield as your EU Representative — EUR 490/year
2. Update Privacy Policy — include EU Rep contact, customs data processing, and retention periods
3. Create ROPA — document data flows for ordering, payment, customs, returns, and tax retention

Get started →