GDPR Compliance by E-commerce Platform
Compare GDPR compliance requirements across major e-commerce platforms. Which platforms handle what, and what you still need.
If you sell online through a platform, you might think the platform handles GDPR. The truth is more nuanced: platforms provide tools, but you remain the data controller for your customer data. Article 27’s requirement for an EU Representative is your responsibility, not the platform’s.
Shopify
Shopify provides GDPR tools including customer data request forms, data export/delete options, and cookie consent banners. However, as the merchant, you are the data controller. You need: an EU Representative (Article 27), a compliant Privacy Policy, a consent management mechanism, a DPA with Shopify, and processing records. Full Shopify guide →
WooCommerce (WordPress)
WooCommerce is self-hosted, meaning full GDPR responsibility rests on you. You need: an EU Representative, cookie consent (GDPR Cookie Consent plugin or similar), Privacy Policy, a DPA with your hosting provider, and processing records. The advantage is full control; the disadvantage is no platform-provided protections.
Amazon (Seller Central / Vendor Central)
Amazon is a marketplace, and sellers are data controllers. Amazon does not handle GDPR compliance on your behalf. If you sell via Amazon EU (Amazon.co.uk, Amazon.de, Amazon.fr, etc.), you receive EU customer data — names, addresses, payment information — and must have an EU Representative. See Amazon GDPR guide →
Etsy
Etsy sellers with EU customers are data controllers. Etsy provides data portability tools but does not supply an EU Representative or GDPR compliance. You need your own Article 27 representative.
Squarespace & Wix
Similar to Shopify: the platform handles infrastructure but you are the data controller. Squarespace and Wix offer cookie banners, but you must arrange your EU Representative separately.
Marketplace Sellers (Mirakl, ChannelAdvisor, etc.)
Multi-platform sellers need particular attention. Each marketplace channel through which you serve EU customers subjects you to GDPR obligations. Read the marketplace seller guide →
Common Requirement Across All Platforms
Every non-EU e-commerce business needs an EU Representative under Article 27. EU Shield provides this from EUR 490/year. Get started →
Ready to get compliant?
€490/year. 15-minute setup. Active next business day.