⚠️ Important: This article is for guidance only. We always recommend speaking to your legal or compliance team to confirm how these rules apply to your specific business.
Your responsibilities
Glu acts as a data processor, you remain the data controller for your customers' data. This means you're responsible for keeping customers informed about how their data is used, typically via an up-to-date privacy policy on your website.
What customer data does Glu store?
Glu stores the following information where it has been provided:
Name
Email address
Phone number
Date of birth
Glu may also store the following data that isn't directly visible to you:
IP addresses
How to redact a customer
Under GDPR, customers have the right to request removal of all Personally Identifiable Information (PII) you hold on them. In Glu, this is a one-step action.
Search for the customer in your Glu admin area using their name or email address
Click Actions in the top right and select Redact customer
⚠️ Important: Redacting a customer is permanent and cannot be undone. All PII will be removed from Glu immediately. The customer profile will continue to exist with a placeholder name, so that activity data, purchase history, and other non-PII is retained and remains accessible via the API.
📚 Note: If a customer requests redaction directly via Shopify, this is automatically actioned in Glu on your behalf.
How long does Glu store customer data?
Glu removes all customer data when your agreement with us is terminated.
While using Glu, you can configure how long you wish to retain customer data and set it to be automatically removed after a specified period. The appropriate retention period will depend on the nature of your business and how you use the data.
💡 Good to know: Under GDPR you must have a reasonable and legitimate interest for retaining customer data. Glu does not share your customer data with any third parties.