What happens when a customer asks Shopify for their data or to be erased

When you act on a customer's privacy request in Shopify, Shopify passes it on to Atomato. An erasure request deletes the revenue records and SKIO data Atomato holds under that customer's ID. A request for data sends Atomato's team a summary of those records.

How you answer a request is your decision, so check with your own legal adviser. This page covers only Atomato's part.

What Atomato holds under a customer ID

• Revenue records. When a shopper clicks a NotiFeed, NotiPop or NotiSell message and adds a product to the cart within the attribution window, Atomato records that and any later order of it: a random session ID, the campaign, click time, checkout and order IDs, product and variant, quantity, revenue, currency, device and attribution type. Records made while the shopper is signed in also carry their customer ID.
• SKIO summaries, if you connect SKIO and an active campaign uses SKIO Integration rules. For signed-in shoppers who load your store: whether they have an active subscription, next renewal date, completed cycles, days since they last cancelled and loyalty points.
• Campaigns that use Specific customers: each picked customer's ID and name.

Campaign activity has no customer ID, and signup emails and phone numbers go to your email or SMS platform. See what shopper data Atomato collects.

When a customer asks for their data

Atomato looks up the revenue records and SKIO data under that customer's ID for your store and emails Atomato's team a summary: how many records it found and the dates of the first and last. The records aren't sent to you or to Shopify, and campaigns that use Specific customers aren't part of the lookup. If the request has no customer ID, there's nothing to look up.

If you need the records, contact the team through Contact support under Help & Support in Atomato, or see get help from the Atomato team. Include your store's .myshopify.com address and the customer's ID, the number at the end of their customer page address in the Shopify admin.

When a customer asks to be erased

When the request arrives, Atomato deletes the revenue records and SKIO data under that customer's ID for your store, with nothing for you to do. A request with no customer ID deletes nothing.

What erasure doesn't cover

• Revenue records made while the shopper wasn't signed in. They have no customer ID, even with an order ID, and Atomato matches by customer ID, not by order. They stay until Shopify's store erasure request after you uninstall.
• An in-memory copy of the customer's segment memberships and SKIO summary, used to pick campaigns. It isn't cleared and expires within 3 minutes.
• New records, if the customer signs in on your store again.
• Contacts in Klaviyo, Mailchimp, Omnisend or Drip, and the customer's data in SKIO. Atomato doesn't contact these platforms. See what Atomato sends to your email platform.
• The customer's ID and name in campaigns that use Specific customers.
• Codes made with Unique coupons in a NotiEmail campaign. Each is generated from the shopper's email address and stays in your Shopify discounts, titled with Atomato and the code in square brackets.
• The shopper's browser, which keeps the email address or phone number and the code shown when a NotiEmail Success step offers a discount. Entries over 30 days old are cleared only when the shopper next opens a NotiEmail signup with a discount on your store, or clears their site data.
• Your integration API keys. They stay in Atomato until Shopify's store erasure request after you uninstall, so revoke them in Klaviyo, Mailchimp, Omnisend, Drip or SKIO after uninstalling.

What you can check in Atomato and your other tools

• In your email or SMS platform, look up the customer's email address or phone number, and decide there whether to remove or suppress the contact.
• In Atomato, open each campaign that uses Specific customers under Customer Segments on the Setup tab, and in every message click the X next to the customer's name. If they were the only customer picked, the message then shows to every shopper, so change the audience or pause the campaign. See show a campaign to specific customers.