1. Home
  2. Magento® 2 Extensions
  3. Personalization & experience management
  4. GDPR
Free installation badge Product image of GDPR
Standard
User Guide
Professional
User Guide
Installation
Installation Guide
Magento Edition *
Version * Compare versions
FREE installation Tooltip
Ends in:
03 : 00 : 00 : 00
Get 10% OFF
$79
icon logo magento 2.4.4 - 2.4.8
Tooltip
Hyva logo Theme
Tooltip

The Most Popular GDPR for Magento 2

v4.2.6
5.0
(34 reviews)
Read all >
Magento 2 GDPR extension helps your online store comply with the latest EU regulations and protect customers' data and privacy. This module ensure your website can tranparently collect all necessary user consents to avoid severe penalties.
tick icon
Compatible with Hyva theme
tick icon
Compatible with Magento 2.4.8
tick icon
Compatible with API/GraphQL
tick icon
Enable delete accounts and corresponding data
tick icon
Display user-friendly cookie consent banners
tick icon
Allow customers to access their personal data easily
tick icon
Safeguard customer identities with robust data anonymization features
tick icon
Notify users of their account deletion
tick icon
Show transparent Terms & Conditions
Free Installation
60 days money back guarantee
Avoid severe punishment by ensuring GDPR requirements compliance
choose a suitable option
Display clear cookie consent requests

Protect Customer Data Privacy — Unlock New Opportunities

Protect Customer Data Privacy — Unlock New Opportunities
Automatically delete inactive accounts

Automatically delete inactive accounts Pro

Mageplaza's GDPR module for Magento 2 makes it easy to identify and automatically delete inactive customer accounts. Simply set the period of inactivity — whether it's 1 month, 2 months, or even a year — and the module will handle the rest. Once an account is deleted, all associated personal data will be securely removed to ensure full GDPR compliance.
Show more

Show cookie acceptance request Pro

With this Magento 2 GDPR plugin, merchants can show their respect to user privacy by informing visitors about the use of cookies and obtaining explicit consent before collecting customer personal data. To do so, the tool enables admins to display an attractive cookie consent banner at the top/bottom of the website.
Show more
Show cookie acceptance request
Allow customers to download their data

Allow customers to download their data Pro

Our GDPR extension also lets customers to effortlessly download their personal data in CSV or XML formats. This feature gives users complete access on what information has been collected and how it’s being used. When shoppers know exactly what's going on, they're more likely to trust your brand.
Show more

Enable account anonymization Pro

To enhance users' privacy, eCommerce store owners can anonymize certain sentitive information, like billing address and shipping address in the order, invoice, shipment, and credit memo after customers delete the account. This ensures that once an account is removed, no one, including admins, can access the customer’s personal data.
Show more
Enable account anonymization
Send account deletion alerts

Send account deletion alerts Pro

All information about the customer account status will be automatically updated by configuring email notifications. Thanks to this feature, admins can catch up with sudden changes like when customers delete their accounts. Simultaneously, shoppers will also get notifications reminding them that their accounts have been inactive for too long and can be deleted.
Show more

All features

Delete customer account

Mageplaza’s Magento 2 GDPR plugin gives you two flexible ways to handle customer account deletions:
check
Self-deletion by customers (Standard): Customers can delete their own accounts directly from their profile.
check
Scheduled deletion by admin (Pro): Admins can automatically remove inactive customer accounts after a specific period that is configured in the backend.
Whenever an account is deleted, all associated personal data, even in their abandoned carts, is permanently erased, ensuring no sensitive information remains vulnerable. Additionally, for completed orders stored in your backend, customer details are securely anonymized to maintain GDPR compliance and protect user privacy.

Request terms agreement Pro

When customers sign up, our module asks them clearly and directly to agree to your store's Terms & Conditions. They can't continue without checking the consent box, prompting them to read and understand your policies. This straightforward process provides clear proof of consent and helps merchants avoid complicated situations with customers in the future.

Evaluate password safety

Magento 2 GDPR plugin also automatically checks how secure a customer’s password is when they create an account. It instantly tells users if their password is strong enough to protect their account from unauthorized access. This simple but highly efficient feature boosts account security and protects personal data.

Configure Cookie restriction Pro

Our GDPR extension for Magento 2 lets you easily manage cookie consent so that your customers clearly see and understand how their data is handled, such as to use special features on website (e.g. login, add to cart/wishlist, recent product view).
You can customize friendly cookie messages, add a direct link leading to your detailed Policy page, and enter button texts like "Accept" or "Allow Cookies." Plus, admins are able to decide exactly where these banners appear (top or bottom of your site) and choose whether to apply the cookie restriction to all countries, only EU countries, or specific countries.
Simple cookie management helps build trust and ensures your store stays GDPR compliant effortlessly.

Download personal data Pro

Allowing customers to download their data is a crucial aspect of GDPR compliance for online stores because it fulfills the customer's right to data portability and access. This right means customers can request a copy of their personal data held by the store and transmit it to another entity.
With solid understanding in eCommerce, Mageplaza team developed GDPR for Magento 2 extension to meet that requirement perfectly by letting customers download their personal data as CSV or Excel XML files. Stored data includes: Account ID, name, email, address, creation time, last update time, ability to change customer group status, etc.

Delete customer address

Address is a sensitive data and many shoppers wish to keep it as a secret. In fact, EU regulation mandates that individuals have the right to have their personal data erased if there is no legitimate reason to retain it. Understanding this, our plugin is designed to let customers easily delete their default address.

Enhance security Pro

To delete accounts, users must enter their password to verify identity. This safety measure guarantees that only authorized account owners can delete accounts. As a result, we can prevent accidental or malicious removals.

Anonymize customer info Pro

Allowing customers to anonymize their data is crucial for online stores to comply with GDPR because it makes sure individuals have control over their personal information and protects them from unauthorized access or misuse. Thanks to this feature, Magento stores can minimize the risk of exposing sensitive data for their clients.
We enable admins to anonymize critical data like names, emails, and addresses in billing documents, orders, invoices, and shipments.

Send email notification Pro

Our GDPR module is a useful tool for keeping both shoppers and store owners informed of account changes. We provide an auto-email sending feature to ensure:
check
Admins receive alerts when customers delete their accounts.
check
Customers get confirmation emails when they want to delete their accounts.
check
Customers also receive timely reminders if their accounts are inactive for too long and when their accounts are deleted.

Management grid Pro

The Magento 2 GDPR extension by Mageplaza provides two comprehensive management grids for recording:
check
Customer data download requests: Provide the information of users who downloaded their personal data, including fields like Name, Email, File Type, Customer Group, etc. Clicking the "View" button on each case will redirect admins to the customer page for further details.
check
Account deletions: Record the list of shoppers who deleted their accounts to track the number of inactive users and their spending on your website (e.g. Email, Order Count, Grand Total, Refunded, etc.) With this information, store owners can identify VIP clients trying to delete their accounts and convince them to stay.

What customers say about us

Product reviews: 34
Overall rating: 5.0
5
4
3
2
1
4.8
frame
Read all reviews
How much do you like this product?
Leave your email to get reward points for reviews
Submit a relevant review of 30+ words to earn 5 reward points (one-time per extension)
Maylay
10 January 2024
Verified purchase
Leo Nguyen
13 October 2022
Verified purchase
Cheryl
29 April 2022
Verified purchase
Ky Nguyen
21 April 2022
Verified purchase
Salim
19 April 2022
Verified purchase

Release notes

  • v4.2.6 (Magento v2.4.x)

    29 September 2025

    Standard:

    • Bug Fix: Fixed a syntax error.

  • v4.2.5 (Magento v2.4.x)

    21 April 2025

    • Compatibility: Now compatible with Hyva theme
    • Compatibility: Now compatible with Magento 2.4.8

  • v4.2.4 (Magento v2.4.x)

    22 June 2023

    • Compatible with Magento v2.4.6
    • Fixed some minor bugs

  • v4.2.3 (Magento v2.4.x)

    05 April 2023

    • Fix some minor bugs

  • v4.2.2 (Magento v2.4.x)

    28 February 2023

    • Fix some minor bugs

  • v4.2.1 (Magento v2.4.x)

    30 August 2022

    • Compatible with Magento v2.4.4

  • v4.2.0 (Magento v2.4.x)

    06 April 2022

    • Supported Rest API & GraphQL

  • 1.4.0 (Magento v2.3.x)

    20 March 2022

    • Supported Rest API & GraphQL

  • v4.1.0 (Magento v2.4.x)

    27 October 2021

    • Compatible Magento 2.4.2
    • Fix some minor bugs

  • v1.3.0 (Magento v2.3.x)

    27 October 2021

    • Compatible Magento 2.3.7
    • Fix some minor bugs

  • v4.0.0 (Magento v2.4.x)

    10 November 2020

    • Supported Magento v2.4

  • 1.2.4 (Magento v2.3.x)

    18 June 2020

    • Compatible with Magento v2.3.5

  • v1.2.3 (Magento v2.3.x)

    26 August 2019

    • Improved code style & performance

    GDPR Pro

    • New feature: download customer data
    • New feature: auto delete customer

  • v1.2.2 (Magento v2.3.x)

    10 June 2019

    • Compatible with Magento 2.3.1

  • v1.2.1 (Magento v2.3.x)

    21 January 2019

    • Compatible with Magento 2.3.0

  • v1.2.0 (Magento v2.3.x)

    14 June 2018

    GDPR Pro

    • Added confirm the password before deleting the account
    • Added confirm the email before deleting the account
    • Added Terms and Conditions on the Create Account page
    • Fixed bug google analytic still works when the user has not allowed the cookie

  • v1.1.0 (Magento v2.3.x)

    27 May 2018

    GDPR Pro

    • Delete customers abandoned carts information
    • Delete billing information appearing on order, invoice, credit memo, shipment
    • Delete customers subscription information
    • Ability to customize cookie’s message
    • Cookie restriction allows admins to display the message in chosen areas

  • v1.0.0 (Magento v2.3.x)

    16 May 2018

    Release v1.0.0

Load More

Frequently Asked Questions

Magento 2 GDPR extension is a tool that helps e-commerce stores comply with the EU General Data Protection Regulation by managing customers' personal data privacy and handling data access and erasure requests.

To allow the Mageplaza GDPR extension, follow these steps: From the Admin Panel, go to Store > Settings > Configuration > Mageplaza Extensions > GDPR > General configuration and turn the Enable to Yes. Follow our standard guide and pro guide for more details.

Absolutely! Using the GDPR extension brings businesses the ability to make all Terms and Conditions transparent, winning the customer's trust and loyalty. Our extension allows users to customize a Cookie request to ask customers whether they agree with the policy.

The answer is no. To prevent data misuse issues, customers are able to permanently delete their accounts with all their personal information, like names, addresses, phone numbers, ID card numbers, credit card information, and so on.

To optimize the effectiveness of GDPR, we highly recommend well-compatible modules such as SMTP and Store Credit.

Yes, the module includes Apply For Countries feature which allow users to apply the GDPR regulations on targeted groups of customer. There are 3 options: All Allowed Countries, All EU Countries, and Specific Countries.

Yes, GDPR is compatible with Hyva theme. However, the checkout only supports hyva-themes/magento2-theme-fallback. To learn how to enable checkout on Hyva, please follow this guide.

Mageplaza provides FREE Hyva Checkout Compatibility for all of our extensions upon requests. You can request by contacting us via email, live chat, or support ticket. Our team will respond within 24 hours and ask for details such as Order ID, extension name, Magento & Hyva versions, and any special requirements. To qualify, your module subscription must be active. If your subscription has expired, renewal is required as some older modules do not support Hyva. Additional customization requests may incur extra costs, and our team will inform you before proceeding. For assistance, feel free to reach out - we're here to help!

Magento Edition *
Version * Compare versions
FREE installation Tooltip
Ends in:
03 : 00 : 00 : 00
Get 10% OFF
$79
icon logo magento 2.4.4 - 2.4.8
Tooltip
Hyva logo Theme
Tooltip

Pricing

Choose your suitable edition.

Standard

$ 79 first year
Includes support & updates for 1 year Tooltip
60 days money back guarantee
Read our policies
Features:
check
Account Automatic Deletion
check
Account Deletion
check
Password Verification
check
Terms and Conditions Display
check
Data Anonymization

Professional

Most popular
$ 129 first year
Includes support & updates for 1 year Tooltip
60 days money back guarantee
Read our policies
Everything in Standard, plus:
check
Customer Information Download
check
Cookie Restriction Mode
check
Cookie Accept Request
check
CMS Cookie Policy Page
check
Automatic Email
check
Countries Application
check
CSS Customization
Can't see the feature you're looking for?
Describe it and we will customize this extension to suit your needs!
Request customization
feature looking icon