latest version

Ultimate GDPR & CCPA Toolkit

Ultimate GDPR & CCPA Plugin

General Information

Thank you for purchasing Ultimate GDPR & CCPA Toolkit! | We’re very pleased that you have chosen our app to extend your store. We’re doing our best not to disappoint you! | Before you get started, please check out these documentation pages. Ultimate GDPR & CCPA Toolkit can only be used with Shopify and we assume that you already have your store ready to go. If you don’t, please see Intro to Shopify to get started.

Requirements

To use this app you will need a Shopify account.

Installation

In our guide, we will show you step by step instructions on how to activate our app:

  • Step 1 - After downloading the Ultimate GDPR & CCPA Toolkit from Shopify App Store, you will be redirected back to your Shopify admin to authorize the use of the app in your store.

    _images/plugin.png
  • Step 2 - The next step is to click the ‘Install app’ button

    _images/plugin1.png
  • Step 3 - The installed Ultimate GDPR & CCPA Toolkit will appear in the app section of the Shopify admin.

  • Step 4 - After clicking the name of the app user will be forwarded to a available Billing plans. This step is required to use the Ultimate GDPR & CCPA Toolkit

Billings plans

In Ultimate GDPR & CPPA Toolkit provides 3 subscription model with monthly payments plans:

  • Basic ($10) - all features except of “Scan for cookies” are available
  • Advanced ($20) - “Scan for cookies” is available, but can be triggered only manually
  • Pro ($30) - Cookie scanner is available and is triggered automatically weekly/monthly
How to choose billings plans
  • Step 1 - Based on preferences choose one of the 3 available groups.

    _images/billing1.png
  • Step 2 - After choosing a preferable billing plan, by clicking Choose plan will be forwarded to Approve subscription page

    _images/billing2.png
  • Step 3 - This page will provide information about the chosen model. Click Approve subscription to confirm. After this step you will be moved to the Home page of the app.

Uninstallation

We are sorry to hear that you wish to remove the GDPR & CCPA Toolkit from your store. Before making this decision please, remember that if you have any problems with using the plugin or in your opinion some functionalities are not working correctly, first try to contact our Support Forum. Our Team will be more than happy to help you with any problem you have. If despite our help you still wish to remove the app, please follow the instructions below, this process is extremely simple.

  • Step 1 - In Shopify admin dashboard, please go to the Apps section in the menu on the left-hand side.

    _images/unin.png
  • Step 2 - On the list of installed apps please find GDPR & CCPA Toolkit app.

  • Step 3 - To the right of the GDPR & CCPA Toolkit app you will see Delete. Clicking it will remove the app from your store.

    _images/unin1.png

Support

All of our items comes with free support. Free support is limited to questions regarding the themes features or problems. We provide premium support for code customisation or third-party plugins.

Note

Our support hours: 10:00 AM – 6:00 PM UTC +1 on Monday to Friday.

Standard Support

For issues and concerns, you can reach us through these support methods:

  • E-mailsupport@createit.com

  • Help Desk – Click here to go to our support website. Just click on the Submit Ticket button and follow instructions to create a ticket.

  • Forum – Comment/Post on the product you have issues/queries in ThemeForest or CodeCanyon websites.

    Before You Post in a Forum

    We urge you to follow the steps below, before you post a new topic on the forum, to speed up your request. It’s in everyone’s interest and will benefit in making the entire forum more efficient:

    • Step 1 – Always check the Documentation and the Knowledgebase Section. Most questions are already answered in those areas.
    • Step 2 – If your question hasn’t been brought up on the forum, please post a new topic. Always be as specific as possible. Creating a topic requires entering the live URL to your home page or page that shows the issue in question. It also has bars for WP and FTP login info, which aren’t required, however, providing us with your login information can save a lot of time for both of us. Login credentials are securely stored and accessible only by our support staff.
    • Step 3 – We usually answer questions in 24 hours on working days. However, if you don’t get any answer within 72 hours bump up your question or send us an e-mail.

For all support methods, you will receive confirmations and replies on your queries through e-mail or by tracking your ticket which you will also get through e-mail. To track your ticket, please click here.

Once we reply to your query, each ticket will be open for 7 days without a reply from you. On the 6th day without a reply, an e-mail will be sent to notify you of the ticket’s inactivity. To make the ticket active again, you simply need to reply or follow the steps in the e-mail. If you won’t make the ticket active within 7 days, on the 8th day the ticket will automatically be closed.

Premium Support

We can create your website from scratch, redesign it or just extend the current ones. For more information, please take a look at our website. Typical issues covered by Premium Support:

  • Custom CSS
  • Support for third party software and plug-ins
  • WordPress Installation with Theme configuration
  • Server configuration
  • Site structure modifications
  • Graphic adjustments, etc.
  • WordPress general howto’s
  • Shopify general howto’s

How to

Use and Features

Note

Before using this plugin, please read the explanation for the use of this plugin in:

GDPR standardizes data protection law across all 28 EU countries and imposes strict new rules on controlling and processing personally identifiable information (PII). From 25 May 2018 every website collecting data from EU citizens must need the GDPR requirements.

Use and its Features are as follows:

In your Shopify admin panel, navigate to Apps > Ultimate GDPR & CCPA and click on the app name:

_images/plugin2.png

You will find there a sidebar menu visible on the left hand of the page (1). From there admin can accessed all of the GDPR & CPPA Toolkit’s options and functionalities.

Home

In this section all the detected cookies are saved.

_images/plugin3.png

Cookies

Cookies section contain options that will:

  • find all the cookies used in the store (Scan for cookies),
  • gather them in a groups (Cookie manager)
  • create a cookie popup (Cookie consent) which will let the visitors of the website to decide which cookies they will allow.
What Cookies are used on your website?

You can render the table with all cookies collected by your website with simple shortcode: {{ultimate_gdpr_cookie_list}}

Active cookies will be displayed in a table, like the following:

_images/short2.png

Note

Your website should be publicly accessible to correctly detect all cookies that are used on it

Block cookies and analytics
_images/plugin5a.png

Option from this section allow to block cookies and analytics until a visitor gives consent to store cookies.

  • Block selected cookies and scripts until consent is given - Cookies with Can be blocked option checked will be blocked until visitor will not give the consent
  • Block analytics until consent is given - Google Analytics, Facebook Pixel, Shopify Analytics, HotJar and Extreme DM tracking will be blocked
  • Enable Google Analytics anonymized IP tracking - This will work only when analytics is allowed

Requests

This section contain all the request send by the visitors using the GDPR & CPPA Toolkit forms.

_images/requests.png

In the Settings we provide an option:

  • Data access - this option based on the fact if it is checked or not will remove empty records from the data file sent to user

In the section below settings option the app store all the messages received from the GDPR & CCPA Toolkit forms. The table contains of messages from:

  • All -
  • Data access -
  • Data erasure -
  • Data rectification -
  • Disable accounts -
Example of the request message

(example of the table) (Example of the inside of a message)

Request form

Content

Terms of service

Here can be set a page as the Terms of service page, set conditions, and set the page where to redirect.

_images/plugin7.png
  • Page

    • Terms of service page - here can be choose where the Terms of service page is located.
    • Current terms version - if you change the version, visitors will have to give their consent again.
  • Force redirect

    • Automatically redirect users to policy page - Enable automatic redirecting users to the policy page until they accept it.
    • User agents (e.g. bots) to not be redirected - Add agents which won’t be redirected to the Term of service page
  • Consent

    • Accept button style - choose one of the available styles for the {{ultimate_gdpr_terms_accept}} button.
    • Users required to accept terms of service - choose user’s type which will need to accept terms of service
    • Page to redirect to after terms are accepted - set the page to which user will be redirected after accepting terms of service
    • Consent expiration time - The time (in days) until visitors are asked for consent again.
  • Additional options

    • Text to be converted to link - Convert any text within your store to a link to the Terms of service page.

Note

If Terms of service page will not be using accept button {{ultimate_gdpr_terms_accept}}, force redirect will never be lifted.

Privacy policy

Here can be set a page as the Privacy Policy page, set conditions, and set the page where to redirect.

_images/plugin9.png
  • Page

    • Privacy policy page - here can be choose where the Privacy policy page is located.
    • Current terms version - if you change the version, visitors will have to give their consent again.
  • Force redirect

    • Automatically redirect users to policy page - Enable automatic redirecting users to the policy page until they accept it.
    • Redirect to policy page first - Make this redirect a priority if multiple redirects are set
    • User agents (e.g. bots) to not be redirected - Add agents which won’t be redirected to the Term of service page
  • Consent

    • Accept button style - choose one of the available styles for the {{ultimate_gdpr_privacy_accept}} button.
    • Users required to accept privacy policy - choose user’s type which will need to accept terms of service
    • Page to redirect to after policy is accepted - set the page to which user will be redirected after accepting terms of service
    • Consent expiration time - The time (in days) until visitors are asked for consent again.
  • Additional options

    • Text to be converted to link - Convert any text within your store to a link to the Privacy policy page.

Note

If Privacy policy page will not be using accept button {{ultimate_gdpr_privacy_accept}}, force redirect will never be lifted.

Age verification

Age Verification settings

Age verification popup comes with number of predefined skins, we can also set skin to “Custom” and use custom color and styling.

Customize (button) - After clicking it user will be forwarded to Customize age verification pop-up section Visitors to be asked for consent - Choose if and when users will see the pop-up

  • Visitors from California only - Age verification pop-up will be visible only for users from California
  • All visitors - Age verification pop-up will be visible for all users
  • Don’t show pop-up to anyone - Age verification will be hidden

Pages to display pop-up - Choose for which pages the pop-up will be visible

  • All pages
  • Selected pages only

Verification expiration time - The time until visitors are asked for verification again. Age restriction limit - The age which customer needs to be to proceed Choose the date selected by default - Choose the date selected by default that will be show in the pop-up

Customize age verification pop-up

Content:

  • Header - Set the text for the header of the pop-up

  • Description - Set the text for the description of the pop-up

    _images/age_ver3.png

Buttons:

  • Text - Set text for the submit button

Appearance

  • Skin - Choose one of the pop-up’s skin which will fit your website the best (there is 16 skins to chose from)

    • Custom

      _images/age_ver5_1.png
    • Red Velvet

      _images/age_ver5_2.png
    • Peppermints

      _images/age_ver5_3.png
    • Mint Chocolate

      _images/age_ver5_4.png
    • Classic createIT

      _images/age_ver5_5.png
    • Blueberry with Orange

      _images/age_ver5_6.png
    • Blue Velvet

      _images/age_ver5_7.png
    • Chocolate Matcha

      _images/age_ver5_8.png
    • Classic Dark

      _images/age_ver5_9.png
    • Classic Light

      _images/age_ver5_10.png
    • Oreo

      _images/age_ver5_11.png
    • Blue Shortbread

      _images/age_ver5_12.png
    • Light Mint

      _images/age_ver5_13.png
    • Blue Cupcake

      _images/age_ver5_14.png
    • Matcha

      _images/age_ver5_15.png
    • Thin Mint

      _images/age_ver5_16.png
  • Position - Choose the possible position from 7 options (Top left, Top gull width, Top right, Bottom left, Bottom full width, Bottom right)

  • Distance from edge of page - Set the distance from the edge in pixels

Note

This option work only for the Skin style: Custom which can be set in the Appearance of the Customize age verification pop-up section

  • Header color - Choose color of the header of the pop-up
  • Text color - Choose color of the text of the pop-up
  • Background color - Choose background color for the pop-up
  • Background image URL - Add background image which will be used for the pop-up
  • Shape - Choose shape of the pop-up from available options (Rectangular, Rounded corner 5px, Rounded corners 25px)
  • Text color - Choose color of the text for the submit button
  • Background color - Choose background color for the submit button
  • Border color - Choose color of the border for the submit button
  • Border width - Choose width of the border for the submit button
  • Shape - Choose shape of the submit button from available options (Pill shape, Rounded corners, Rectangular)
  • Text color - Choose color of the text in the date inputs
  • Background color - Choose background color of the date inputs
  • Border color - Choose color of the border for the date inputs
  • Border width - Choose width of the border for the date inputs
  • Shape - Choose shape of the date inputs from available options (Pill shape, Rounded corners, Rectangular)

Custom CSS - Add custom styling for the Age verification popup

Shortcodes

Settings

After clicking the Settings link with a cog icon admin will be forwarded to a settings section which are used for the shortcodes the app is using.

  • Privacy settings widget:

    • Widget skin - choose one of the available skins for the Privacy settings widget (Default, Simple, Rounded, Tabbed)
    • Enable reCAPTCHA - when choose will protect forms within the widget from spam and abuse
  • Content protection - this option allow to customize message which will be used for the {{ultimate_gdpr_protection level=4}} Hidden content {{/ultimate_gdpr_protection}} shortcode

  • Privacy center - provide 3 options to customize the privacy center created via {{ultimate_gdpr_center}} shortcode:

    • Page with ‘my account’ GDPR form - to this page user will be forwarded after clicking Data Access Url, Forget Me URL, Forget Me URL which are part of the GDPR form
    • Contact page - user will be forwarded to this page after clicking Contact page
    • Icon color - choose the color which will be used for the icons
  • Cookie list - provide option which will allow to display all cookies separately (if checked)

    _images/settingss.png

Shortcodes

Below the Settings are presented all the available GDPR & CCPA Toolkit’s shortcodes which can be used on the store pages.

_images/shortcodes.png
  • {{ultimate_gdpr_terms_accept}} - will add Terms and Condition button to the page
  • {{ultimate_gdpr_privacy_accept}} - will add Privacy Policy button to the page
  • {{ultimate_gdpr_cookie_list}} - will add Privacy Policy button to the page
  • {{ultimate_gdpr_cookie_modal}} Change cookie settings {{/ultimate_gdpr_cookie_modal}} - allows you to create a link for the Advance cookie settings. You can add it anywhere on your site.
  • {{ultimate_gdpr_protection level=4}} Hidden content {{/ultimate_gdpr_protection}} - it hide any content in the shortcode unless the cookie group chosen by the user of the site will meet the requirements.
  • {{ultimate_gdpr_center}} - will create a page that have the Privacy tools in the site.

Notifications

_images/notification.png

Here admin can edit content of all notifications which our app will send to the visitors and subscribers

Notifications recipient
  • Email address - If the email address for the request is different than the one used by the store by default, it can be added here
Visitor notifications
  • Request - list of notifications templates that will be send automatically to the visitor. Each of the template can be edit after clicking on it.

    • Email confirmation
    • Data erasure
    • Data access
    • Unsubscribe
    • Disable account
    • Do not sell data
  • Data breach - Sent to all the customers and visitors when a data breach happens.

    • Data breach - allow to edit the template which will be received by the visitors.
Request notifications
  • New request - Sent to request notification subscribers when a visitor puts in a request.

Data Breach

Here admin will find an option to send a notifications to all of the user of the store.

_images/data_breach.png

This section contain options to:

  • Send notification - Will automatically send notification to all of the users which personal data might be exposure
  • Customize notification - Allow admin of the store to modify the content of the message

Settings

_images/settings_all.png

Settings contain 3 options:

  • Export settings - Option allowing to Export all of the app’s settings. This way the same settings can be used on multiple sites.
  • Import settings - Allow to export GDPR & CPPA Toolkit’s settings from a different website
  • Reset settings - Will reset back all the changed options to default.

Add to Page

These are samples on how to add the Ultimate GDPR & CCPA features and shortcodes.

Terms of service

To add Terms of service on the store, create a page where all the terms of service are written. To achieve it please follow steps below:

Step 1. Log into Shopify account. Go to the side menu of the Shopify dashboard and choose Online Store.

Step 2. On the Pages page, select Add page.

_images/pp2.png

Step 3. On the Add page page, enter “Terms of service” in the Title (1) field, then paste your Terms of service into the Content (2) field.

_images/pp3.png

Step 4. To add the button to accept the terms of service, add the shortcode: {{ultimate_gdpr_terms_accept}} and click Save.

Step 5. Once your Terms of service page is added to your Shopify dashboard, please navigate to Ultimate GDPR & CPPA Toolkit by Apps > Ultimate GDPR & CPPA and click on the app name. This way you will be redirected to it’s settings.

_images/plugin2.png

Step 6. From there go to Content > Terms of service. Here can be set a page as the Terms of service page, conditions, and the page where to redirect after consent is given.

_images/plugin7.png

Step 7. In Page section choose previously created page in the Existing page

Add the needed information and details. For more details on Terms of service, click here.

Privacy Policy

To add Privacy Policy on the store, create a page where all the privacy policy are written. To achieve it please follow steps below:

Step 1. Log into Shopify account. On the side menu of the Shopify dashboard and choose Online Store. Click it.

Step 2. On the Pages page, select Add page.

_images/pp2.png

Step 3. On the Add page page, enter “Privacy Policy” in the Title (1) field, then paste your Privacy Policy into the Content (2) field.

_images/pp3.png

Step 4. To add the button to accept the privacy policy, add the shortcode: {{ultimate_gdpr_privacy_accept}} and click Save.

Step 5. Once your Privacy Policy page is added to your Shopify dashboard, please navigate to Ultimate GDPR & CPPA Toolkit by Apps > Ultimate GDPR & CPPA and click on the app name. This way you will be redirected to it’s settings.

_images/plugin2.png

Step 6. From there go to Content > Privacy policy. Here can be set a page as the Privacy Policy page, conditions, and the page where to redirect after consent is given.

_images/plugin9.png

Step 7. In Page section choose previously created page in the Existing page

Add the needed information and details. For more details on Privacy Policy, click here.

Data erasure

When activating the Ultimate GDPR & CPPA Toolkit our App will provide a ready to use Request data [Ultimate GDPR & CCPA] page. The page can be access by going to Shopify dashboard and from there navigating to Online Store > Pages. This page contain not only Data erasure form but also:

  • Data access
  • Data rectification
  • Restrict processing
_images/add5.png

Frontend view:

_images/add5b.png
Email confirmation

By going to to Notifications > Visitor notifications and clicking the Email confirmation link admin will be forwarded to Email confirmation section. Created there template will be send automatically to the user after sending request for:

  • Data access
  • Data erasure

using the Request data [Ultimate GDPR & CCPA] page.

_images/add4b.png

Template contains (1):

  • Email subject - this will be header of the sended email reply
  • Email body - body of the email
  • Email confirmation target page URL - URL of the confirmation page. If left empty the correct link will be autodetect.

All 3 section can be created by using Variables. They allow to output the name or URL of the store in the template. The available variables are (2):

  • {{shop.name}} - add the shop name to the message template
  • {{shop.url}} - add shop URL address to the message template
  • {{request.type}} - add the name of the request
  • {{request.url}} - add URL of the page from where the request was sended
  • {{request.email}} - add email of the user who send request
  • {{confirmation_page_url}} - Add link of the confirmation page

Each of the variables can be added by placing the cursor in the text abd clicking variable name. The variable will be automatically insert in the active section.

_images/add4.png
New request template

By going to to Notifications > Request notifications and clicking the New request link, admin will be forwarded to New request section. Created there template will be send automatically to the admin or Notifications recipient after visitor will confirm the request (template above).

_images/add4bb.png

Template contains (1):

  • Email subject - this will be header of the sended email reply
  • Email body - body of the email

All 3 section can be created by using Variables. They allow to output the name or URL of the store in the template. The available variables are (2):

  • {{shop.name}} - add the shop name to the message template
  • {{shop.url}} - add shop URL address to the message template
  • {{request.type}} - add the name of the request
  • {{request.url}} - add URL of the page from where the request was sended
  • {{request.email}} - add email of the user who send request
  • {{confirmation_page_url}} - Add link of the confirmation page

Each of the variables can be added by placing the cursor in the text abd clicking variable name. The variable will be automatically insert in the active section.

Creating Data erasement response

Please go to Notifications > Visitor notifications and click the Data erasure. Doing that allows to edit the content of the template. Add there all the needed informations and details using the available variables.

_images/add5c.png

When user send the request, an email confirming (Email confirmation template) the request will be sent to the user. Clicking the {{confirmation_page_url}} link, will mean that owner of the email address confirm the request.

_images/add44.png

Owner of the website or the Notifications recipient which can be set in Notifications > Notifications recipient field will received message that there were new request created.

_images/notification1.png

Other place to check the current Requests and their status is in the Requests section of the main menu.

_images/notification2.png

After approving the request by checking the box next to the email and choosing Mark as fulfilled, and saving the changes by clicking Save the status of the request will change from verified to fulfilled. The data will be removed and user will recived email, that the data was erasement.

_images/notification3.png

Data Access!!

When activating the Ultimate GDPR & CPPA Toolkit our App will provide a ready to use Request data [Ultimate GDPR & CCPA] page. The page can be access by going to Shopify dashboard and from there navigating to Online Store > Pages. This page contain not only Data access form but also:

  • Data erasure
  • Data rectification
  • Restrict processing
_images/add5.png

Frontend view:

_images/add5d.png
Email confirmation

By going to Notifications > Visitor notifications and clicking the Email confirmation link, admin will be forwarded to Email confirmation section. Created there template will be send automatically to the user after sending request for:

  • Data access
  • Data erasure

using the Request data [Ultimate GDPR & CCPA] page.

_images/add4b.png

Template contains (1):

  • Email subject - this will be header of the sended email reply
  • Email body - body of the email
  • Email confirmation target page URL - URL of the confirmation page. If left empty the correct link will be autodetect.

All 3 section can be created by using Variables. They allow to output the name or URL of the store in the template. The available variables are (2):

  • {{shop.name}} - add the shop name to the message template
  • {{shop.url}} - add shop URL address to the message template
  • {{request.type}} - add the name of the request
  • {{request.url}} - add URL of the page from where the request was sended
  • {{request.email}} - add email of the user who send request
  • {{confirmation_page_url}} - Add link of the confirmation page

Each of the variables can be added by placing the cursor in the text abd clicking variable name. The variable will be automatically insert in the active section.

_images/add4.png
New request template

By going to to Notifications > Request notifications and clicking the New request link admin will be forwarded to New request section. Created there template will be send automatically to the admin or Notifications recipient after visitor will confirm the request (template above).

_images/add4bb.png

Template contains (1):

  • Email subject - this will be header of the sended email reply
  • Email body - body of the email

All 2 section can be created by using Variables. They allow to output the name or URL of the store in the template. The available variables are (2):

  • {{shop.name}} - add the shop name to the message template
  • {{shop.url}} - add shop URL address to the message template
  • {{request.type}} - add the name of the request
  • {{request.url}} - add URL of the page from where the request was sended
  • {{request.email}} - add email of the user who send request
  • {{confirmation_page_url}} - Add link of the confirmation page

Each of the variables can be added by placing the cursor in the text abd clicking variable name. The variable will be automatically insert in the active section.

Creating Data access response

Please go to Notifications > Visitor notifications and click the Data access link. Doing that allows to edit the content of the template. Add there all the needed informations and details using the available variables.

_images/template1.png

When user send the request, an email confirming (Email confirmation template) the request will be sent to the user. Clicking the {{confirmation_page_url}} link, will mean that owner of the email address confirm the request.

_images/add44.png

Owner of the website or the Notifications recipient which can be set in Notifications > Notifications recipient field will received message that there were new request created.

_images/notification1.png

Other place to check the current Requests and their status is in the Requests section of the main menu.

_images/notification2.png

After approving the request by checking the box next to the email and choosing Mark as fulfilled, and saving the changes by clicking Save the status of the request will change from verified to fulfilled. The data will be removed and user will recived email, that the data was erasement.

_images/notification3.png

NONONONONO***

To add the Data Access request on your site, create a page where your want to show the Personal Data Access tab.

In the page you created, add the shortcode: [ultimate_gdpr_myaccount]

_images/add5.png

After publishing the page with the Data Access request, in your dashboard go to Ultimate GDPR & CCPA > Data Access.

You will be redirected to the Data access settings.

_images/plugin11.png

Add the needed information and details. For more details on Data Access settings, click here.

When a user sends a request, it is posted in Data access requests list.

An email with data attached will be sent to the user once the admin of the site selected the email of the user he would like to approve the request and clicked on Send data to selected emails button.

Data Rectification

To add the Data Rectification request on your site, create a page where your want to show the Data Rectification tab.

In the page you created, add the shortcode: [ultimate_gdpr_myaccount]

_images/add5.png

After publishing the page with the Data Rectification, in your dashboard go to Ultimate GDPR & CCPA > Data Rectification.

You will be redirected to the Data Rectification settings.

_images/plugin19.png

Add the needed information and details. For more details on Data Rectification settings, click here.

When a user sends a request, an email to confirm the request will be sent to the user. The user must first confirm the request before it is posted in Data rectification requests list.

An email to notify the user that the request is accepted will be sent once the admin of the site selected the email of the user he would like to approve the request and clicked on Send data to selected emails button.

Unsubscribe

To add the Unsubscribe request on your site, create a page where your want to show the Unsubscription tab.

In the page you created, add the shortcode: [ultimate_gdpr_myaccount]

_images/add5.png

After publishing the page with the Unsubscribe, in your dashboard go to Ultimate GDPR & CCPA > Unsubscribe.

You will be redirected to the Unsubscribe settings.

_images/plugin28.png

Add the needed information and details. For more details on Unsubscribe settings, click here.

When a user sends a request, an email to confirm the request will be sent to the user.

_images/add33.png

Depending on the option set in the Unsubscribe settings:

  • Automatically unsubscribe users who confirmed their mail is DISABLED

    If the option Automatically unsubscribe users who confirmed their mail is disabled, the user must confirm the request in the email first for the request to be posted in the Unsubscribe request list.

    _images/add34.png

    In the Unsubscribe request list, the admin of the site have the option to approve or delete the request.

    _images/add32.png

    If the admin approves the request, select the services to unsubscribe the user from (these services are selected by the user for what services he would like to be unsubscribed). Then select the user you would like to unsubscribe by selecting the check box below Email user / remove request, then click the Unsubscribe and notify selected users button.

    _images/add35.png

    An email to notify the user that the request to unsubscribe is approved.

    _images/add36.png
  • Automatically unsubscribe users who confirmed their mail is ENABLED

    If the option Automatically unsubscribe users who confirmed their mail is enabled, when the user confirm the request in the email the user will automatically be unsubscribe from the services the user have selected without any admin intervention.

    _images/add31.png

    The user request will be posted in the Unsubscribe request list.

    If the option Automatically send email about unsubscription to users who confirmed their email is enabled, once the user confirms the request in the email the user will receive an email to notify the user for the unsubscription.

Cookies Management

What Cookies are used on your website

You can show a table with all cookies collected by your website with simple shortcode: {{ultimate_gdpr_cookie_list}}

Active cookies will be displayed in a table, like the following:

_images/short2.png

Note

Your website should be publicly accessible to correctly detect all cookies that are used on it

Whitelist Cookies

When a scenario that the set default privacy group is ‘Block all’ and the user will select ‘Block all’ cookie, the user will see the cookie popup over and over since the user blocked saving cookies and there is no way for the system to know that the user already accepted the cookie consent.

Whitelist cookies are cookies that are allowed even if you choose to Block all cookies in the site.

You can add whitelisted cookies in Cookies > Cookie consent > Cookie whitelist:

_images/add24.png

This way you can allow selected cookies to be accepted even if cookie setting is set to ‘Block all’.

Note

User’s privacy settings (whether he accepts cookies or not, and what group of cookies) consent is saved in our ultimate-gdpr-cookie

Use Services Manager

This is where the cookies that are detected are saved. You can change the cookies’s details here. You can also make a customized cookie to be blocked/accepted in your site.

To detect cookies that are used in your site, click the Scan for cookies button at Home section of the app or on path Cookies > Cookie manager.

Note

To have the Block All cookies functionality working, you must first detect all cookies and save them in the Services Manager.

The cookies that are detected is then shown in the Cookies > Cookie manager.

In Cookies > Cookie manager you will see:

_images/add21.png

Basic information:

  • Title - Used only for admin user to navigate through services.
  • Purpose - Purpose of the cookie.

Scripts that create cookies:

  • Keywords to find scripts - Comma separated names of java-script scripts which are to be blocked, to prevent creation of unwanted cookies.

    Note

    App searches html content of <script>, <noscript> and <iframe> tags. If app finds any of “script names” it removes entire content of given tag.

Cookies to block:

  • Cookie names - Comma separated names of cookies which are to be blocked. It’s important use actual name of cookie, not name of service.

Properties:

  • Level - Assign cookie to a level on which it will be allowed on site.

  • Domain - select the domain to which the cookie belongs

  • Type - Pick the group the cookies belong.

  • Can be blocked - Option to activate or deactivate. Only services which are active, are being blocked.

    Note

    Only services which are active, are being blocked. Unchecking this checkbox makes the app ignore this service.

How to add Third Party Cookies

When a third party cookie is not detected by the cookie scanner, you can add the third party cookies manually.

To add third party cookies, you can add the Cookie name of the cookies that you would like to block in Cookie > Cookie manager under Cookie names.

Sample third party setup:

_images/add27.png

Tracking Users Anonymously (Google Analytics)

To use this feature correctly, these are some pointers:

  • In the Cookies > Cookie manager, uncheck the Can be blocked so that Google Analytics won’t be blocked.

    _images/add28.png
  • The Google Analytics Tracking ID should be added in Ultimate GDPR & CCPA > Cookie popup for the feature to work since Google Analytics will be blocked as long as the consent isn’t given.

    _images/add29.png
  • Enable the option for anonymization in Ultimate GDPR & CCPA > Cookie popup. This option will allow you to track anonymously without collecting any user data in compliance with GDPR & CCPA.

    _images/add30.png
What does Tracking Users Anonymously exactly mean?

After following the instruction above, IP of all users visiting the website will be altered before sending the tracking data to Google. This will make impossible for search engines to directly assign tracking data to an exact IP Address making this action GDPR & CCPA compliance even if the user didn’t accept cookie consent.

For more advanced information for this functionality access this link.

How to check for cookies

Mozilla Firefox

In Firefox, press F12 and navigate to Storage tab. There a list of cookies with all necessary information should be displayed.

_images/service.png
Google Chrome

In Google Chrome, press F12 and navigate to Application tab. Click on the drop down arrow beside Cookies below Storage. The list of cookies with all necessary information should be displayed.

_images/service1.png
App

Cookies can also be detected using plugin’s built in mechanism called “Scan for cookies”. Cookie detection can be done using one button.

Navigate to Home or Cookies > Cookie manager. You will find there DScan for cookies button.

Please be patient, since this process might take a while. If no cookies were found please wait for around one hour and try again. In case this does not help please contact our support.

_images/service2.png

Content Protection

This feature is used by using this shortcode: {{ultimate_gdpr_protection level=4}} & {{/ultimate_gdpr_protection level=4}}

This feature will hide any content inside the shortcode unless the cookie group chosen by the user of the site will meet the requirements of the shortcode.

To add the shortcode in the page, follow this format:

{{ultimate_gdpr_protection level=4}} Hidden content {{/ultimate_gdpr_protection}}

Note

The level in {{ultimate_gdpr_protection level=4}} is the cookie group condition that needs to be meet for the blur to clear.

Level Cookie Group
1 Essentials
2 Functionality
3 Analytics
4 Advertising

A label/notice will be shown in front of the blurred area.

_images/prot2.png

Sample when condition is meet

_images/prot3.png

Customize

Terms of service and Privacy Policy

Buttons
_images/terms1.png

To customize the buttons for Terms and Conditions and Privacy Policy, you have 2 options: Theme Default or Cookie box buttons

  • Theme Default

    This is the default button design that your WP theme is using. It will give you a uniform look to your site.

  • Cookie consent pop-up style

    This option is using the same button design as the Cookie consent. Which you can change in Cookies > Cookie consent and click Customize in the Cookie consent pop-up section .

    _images/terms.png
Bot Detection

Detect whether a bot (Google bot) or a human enters the site and enforce the Terms and Conditions and Privacy Policy.

You can add the bot name in:

  • Terms and Conditions - Ultimate GDPR & CCPA > Terms and Conditions > Do not block user agents (eg. bots) containing the following texts (comma separated)
  • Privacy Policy - Ultimate GDPR & CCPA > Privacy Policy > Do not block user agents (eg. bots) containing the following texts (comma separated)

Note

You can see the bot database here

Right to be Forgotten

Note

This feature will show the plugins that are integrated in Ultimate GDPR that gather data from the users.

Changing the Text in Forgotten Form
_images/forget.png

You can change the Name and Description that will be shown in the Forget Me tab of the GDPR shortcode.

To customize the text in the form for Right to be Forgotten, go to Ultimate GDPR & CCPA > Services.

Look for the service that you would like to change.

Note

For this example, we’ll use WooCommerce.

_images/forget3.png

Add the Changes that you want, then click on the Save Changes button.

It should reflect in the form:

_images/forget4.png
Modify Right to be Forgotten Form

There are 2 ways to remove an option in the Right to be Forgotten form.

_images/forget.png

Note

This example will remove the WP Comment from the Right to be Forgotten form.

  1. Adding a filter in the functions.php of the theme that is used

    _images/forget1.png

    Add this filter in the file:

    add_filter( 'ct_ultimate_gdpr_model_services_default', 'my_services' );
    function my_services( $services ) {
    
    foreach( $services as $key => $val ) {
    if ( $val == 'CT_Ultimate_GDPR_Service_WP_Comments' ) {
    unset( $services[ $key ] );
    }
    }
    return $services;
    
    }
    
  2. Overwrite the Shortcode’s template

    Create a Php file in your theme with a file name: shortcode-myaccount.php

    _images/forget2.png

    Then add this code in the file:

    <?php
    
    /** @var CT_Ultimate_GDPR_Service_Abstract $service */
    foreach ( $options['services'] as $service ):
    
    if ( $service->get_id() == 'wp_comments' ) :
    continue;
    endif;
    
    ?>
    <div class="ct-ultimate-gdpr-service-options">
    <div class="ct-ultimate-gdpr-service-option">
    <input type="checkbox" name="ct-ultimate-gdpr-service-forget[]"
    value="<?php echo esc_attr( $service->get_id() ); ?>">
    </div>
    <div class="ct-ultimate-gdpr-service-details">
    <div class="ct-ultimate-gdpr-service-title"><?php echo esc_html( $service->get_name() ); ?></div>
    <div class="ct-ultimate-gdpr-service-description"><?php echo esc_html( $service->get_description() ); ?></div>
    </div>
    </div>
    
    
    <?php endforeach; ?>
    

Export/Import Options

Our GDPR & CCPA Toolkit allows to export and import the current app settings or the services from Cookie manager

This give an efficient and fast way to copy current GDPR & CCPA settings to another store that has Ultimate GDPR & CCPA Toolkit installed.

GDPR & CCPA Toolkit Settings

Export
  • Step 1. To export the GDPR & CCPA Toolkit Settings, simply go to Settings in the app’s sidebar menu. You will find the options to Export all of the settings.
_images/export.png
  • Step 2. Click on the button and a .json file will be downloaded.
  • Step 3. This contains the settings from your Ultimate GDPR & CCPA Toolkit. This can be used to import the settings.
_images/export1.png
Import
  • Step 1. To import the GDPR & CCPA Toolkit Settings, simply go to **Settings* in the app’s sidebar menu. You will find the options to Import all of the settings.
_images/export2.png
  • Step 2. Click on the button and you will be asked to choose the .json file for the GDPR & CCPA Toolkit.
  • Step 3. Once you have chosen a file, below the Choose file button you will see the Import settings settings button.
  • Step 4. Click on the Import settings button, this will import all the details in the .json file.
_images/export3.png

App Translation

Translate GDPR & CCPA App

Shortcodes

Available App Shortcodes

All the th shortcodes used in the app can be found in the Ultimate GDPR & CPPA Toolkit menu on path Content > Shortcodes

_images/shortcodes_m.png

{{ultimate_gdpr_terms_accept}}

This shortcode will let you add a button to accept the Terms and Conditions that is in the page. The options for this shortcode could be changed in Content > Terms of service.

_images/short1.png

To change the style of the button please go to Content > Terms of service where in Consent section can be choose:

_images/short1c.png
  • Accept button style

    • Theme default - will use the style provided by the used theme
    • Cookie consent pop-up style - will use the style choose in the cookie consent
  • Users required to accept terms of service - choose groups which will be required to accept the Privacy policy

  • Page to redirect to after terms are accepted - to this page customer will be forwarded

  • Consent expiration time - The time until visitors are asked for consent again.

{{ultimate_gdpr_privacy_accept}}

This shortcode will let you add a button to accept the Privacy Policy that is in the page. The options for this shortcode could be changed in Content > Privacy policy.

_images/short1b.png

To change the style of the button please go to Content > Privacy Policy where in Consent section can be choose:

_images/short1a.png
  • Accept button style

    • Theme default - will use the style provided by the used theme
    • Cookie consent pop-up style - will use the style choose in the cookie consent
  • Users required to accept privacy policy - choose groups which will be required to accept the Privacy policy

  • Page to redirect to after policy is accepted - to this page customer will be forwarded

  • Consent expiration time - The time until visitors are asked for consent again.

{{ultimate_gdpr_protection level=4}} Hidden content {{/ultimate_gdpr_protection}}

This shortcode will hide any content in the shortcode unless the cookie group chosen by the user of the site will meet the requirements of the shortcode.

_images/prot2.png

How to add Shortcode to a page

To add the shortcode to the page please follow the steps below:

  • Step 1. In App menu go to Content > Shortcodes and copy shortcode you want to add.

  • Step 2. Go to Online Store section of your store

  • Step 3. Go to Pages and create new page clicking on the Add page button or access already created page by clicking on it.

  • Step 4. Paste the shortcode which was copy in the Step 1.

    _images/shortp.png
  • Step 5. Click Save button on the bottom of the page. And that’s it!

    _images/table.png

FAQs

3rd Party Cookies

What are third-party cookies?

In “third-party cookie”, the word “party” refers to the domain as specified in the cookie; the website that is placing the cookie.

So, for example, if you visit example.com and the domain of the cookie placed on your computer is example.com, then this is a first-party cookie.

If, however, you visit example.com and the cookie placed on your computer says some-other-site.com, then there are third-party cookies generated.

_images/faq3.png

Blocking Cookies

Why are some cookies not Blocked?

These are some of the reasons why this happens:

  • User have visited the site before the plugin was activated.

    We don’t want to block all the cookies since the user already interacted with the site.

    These cookies are saved in the users computer and could be removed by clearing the computer’s cache history.

    _images/faq.png
  • Cookie is essential for the site to work.

    These are cookies that are needed for your site to work properly. These cookies are usually added in the cookie whitelist.


    To know more about Cookie Whitelist, read this part of the documentation.

    _images/faq2.png
  • The cookie is a “third party” type.

    Opposite to a “first party” cookie, a “third party” cookie couldn’t be block using standard programmatical methods.

    The only way to do it is to prevent the script that is adding the cookie from initializing.

    We’re trying to find ways to do so, but there are some rare occasions that it isn’t possible/difficult to block such scripts.

    _images/faq1.png

    You can read more information about third party cookies here.

    • The cookies are created by other plugins that are not integrated with Ultimate GDPR & CCPA Toolkit.

      Cookies that are generated by the active plugins in the site.

      _images/faq4.png

How to remove cookies that are generated before plugin is installed?

It’s not always possible to remove existing cookies. For example “third-party” cookies cannot be removed programmatically. The only way to “block” them is to prevent them from creating.

Users can also remove them manually, by going to the browser settings and clear cookies there (users can also use CTRL + Shift + Delete shortcut to open the browser settings for clear cookies).

_images/faq5.png

Google Analytics Stats

How to use Google Tag Manager?

Using the Google Tag Manager to manage your Google Analytics makes it faster and easier.

Note

Install Google Tag Manager first in your site so that it can monitor the sites activity.

In the Tag Manager, create the Tag for Google Analytics. You can use a pre-existing Google Analytics ID.

By using Google Tag Manager, you can customize how Google Analytics behave in your site.

For information on how to install and setup Google Tag Manager, click here.

Common Issues

Incompatible with the Theme

There are thousands of apps that are compatible with Shopify. Ultimate GDPR & CCPA Toolkit is coded to be compatible with Free themes that are using Shopify Coding Standards, but some themes and apps do not follow this standards and may cause issues with compatibility.

These are some steps to troubleshoot if there’s error/s when Ultimate GDPR & CCPA Toolkit is activated:

Note

Create a Backup for your site before doing these steps to prevent any issue with your site.

Check for Theme Conflicts

  • Change into a default Shopify theme and check if the issue still persist.
  • If the issue doesn’t persist, the issue is caused by the theme.
  • If the issue still persist, please proceed with Check for Apps Conflicts.