GDPR & Privacy
Built with GDPR in mind from day one
Consent, deletion, and data-subject requests aren't an afterthought. They're wired into how Peleka handles every contact.
Consent recorded at checkout
When a customer opts in to marketing at checkout, Peleka records it for both Shopify and WooCommerce. The checkbox is opt-in and off by default, and the disclosure text is yours to customize.
Delete any contact's data, anytime
Erase an individual contact's personal data from your account whenever you need to. No support ticket required.
Automatic Shopify compliance webhooks
Peleka implements Shopify's mandatory GDPR webhooks (customer data erasure, shop data cleanup on uninstall, and data-access requests) automatically, not as a manual process.
A real Data Processing Agreement
Our DPA is publicly available, incorporated into our Terms of Service by reference, and covers Standard Contractual Clauses and the UK IDTA for international transfers.
Need the legal document itself? Read our Data Processing Agreement or see how we handle personal data generally in our Privacy Policy.
FAQ
Questions, answered
Is Peleka GDPR compliant?
Peleka is built to help you meet your GDPR obligations as a controller: consent capture at checkout, self-serve erasure, automatic Shopify compliance webhooks, and a signed DPA. Compliance for your specific business still depends on how you use the Service, so treat this as a starting point, not a substitute for your own legal review.
Do you have a Data Processing Agreement (DPA)?
Our DPA is publicly available and automatically incorporated into our Terms of Service, so most customers don't need a separate contract.
How do you handle data subject access or deletion requests?
You can delete an individual contact's data directly from your account at any time. For Shopify stores, Peleka also implements Shopify's mandatory customers/redact, shop/redact, and customers/data_request compliance webhooks automatically.
Where is my data stored?
Peleka's infrastructure is US-based. Where personal data originating in the EEA, UK, or Switzerland is transferred to the US, we rely on Standard Contractual Clauses and, for UK transfers, the UK International Data Transfer Agreement.
Who do I contact about a privacy or data subject request?
Email [email protected]. Every request is read and answered by a real person.
Get started
Ready when you are
Free up to 500 subscribers. No credit card. Your first broadcast can be out in minutes.