GDPR & Privacy
Built with GDPR in mind from day one
Consent, deletion, and data-subject requests aren't an afterthought. They're wired into how Peleka handles every contact.
Consent recorded at checkout
When a customer opts in to marketing at checkout, Peleka records it for both Shopify and WooCommerce. The checkbox is opt-in and off by default, and the disclosure text is yours to customize.
A preference center, not just an unsubscribe link
Define your own email categories and Peleka hosts a page where subscribers choose what they receive and correct their own details. Granular consent is what regulators ask for, and it keeps people on your list who would otherwise have left entirely.
Delete any contact's data, anytime
Erase an individual contact's personal data from your account whenever you need to. No support ticket required.
Automatic Shopify compliance webhooks
Peleka implements Shopify's mandatory GDPR webhooks (customer data erasure, shop data cleanup on uninstall, and data-access requests) automatically, not as a manual process.
Shopper data requests, tracked to completion
When a shopper files a data request through your store, it lands in your dashboard as a request with their data already gathered, and we notify you. It stays in 'needs attention' until you mark it fulfilled, with the date recorded, so nothing quietly slips past a deadline.
Export your whole account, yourself
Workspace owners can request a full export of their account data from settings, without emailing anyone to arrange it.
A real Data Processing Agreement
Our DPA is publicly available, incorporated into our Terms of Service by reference, and covers Standard Contractual Clauses and the UK IDTA for international transfers.
Need the legal document itself? Read our Data Processing Agreement or see how we handle personal data generally in our Privacy Policy.
FAQ
Questions, answered
Is Peleka GDPR compliant?
Peleka is built to help you meet your GDPR obligations as a controller: consent capture at checkout, self-serve erasure, automatic Shopify compliance webhooks, and a signed DPA. Compliance for your specific business still depends on how you use the Service, so treat this as a starting point, not a substitute for your own legal review.
Do you have a Data Processing Agreement (DPA)?
Our DPA is publicly available and automatically incorporated into our Terms of Service, so most customers don't need a separate contract.
How do you handle data subject access or deletion requests?
You can delete an individual contact's data directly from your account at any time. For Shopify stores, Peleka also implements Shopify's mandatory customers/redact, shop/redact, and customers/data_request compliance webhooks automatically. A shopper's data request becomes a tracked item in your dashboard, with their data already gathered and a notification sent, and it stays open until you mark it fulfilled.
Can I export all of my account data?
Workspace owners can request a full export from account settings. Exporting your contacts to CSV needs no request at all: that's available from your audience at any time.
Where is my data stored?
Peleka's infrastructure is US-based. Where personal data originating in the EEA, UK, or Switzerland is transferred to the US, we rely on Standard Contractual Clauses and, for UK transfers, the UK International Data Transfer Agreement.
Who do I contact about a privacy or data subject request?
Email [email protected]. Every request is read and answered by a real person.
Get started
Ready when you are
Free up to 500 subscribers. No credit card. Your first broadcast can be out in minutes.