Size Chart Apps and GDPR / CCPA Compliance on Shopify
Body measurements are personal data. Treat them like health data.
What GDPR Requires
Lawful basis. Customer consent for measurement collection, captured + recorded.
Purpose limitation. Measurements only used for sizing/fulfillment. Not marketing.
Retention. Defined retention period. Auto-delete after order completion + buffer.
Right to erasure. Customer can request deletion. Process within 30 days.
Data Processing Agreement. App vendor signs DPA with merchant.
EU data residency. If serving EU customers, EU data center location preferred.
What Tailor Size Guide Provides
DPA on request. EU data residency (Frankfurt). Right-to-erasure honored. Consent capture built into measurement form. CCPA-equivalent for California.
FAQs
Body measurements = personal data?
Yes — sensitive personal data.
Tailor Size Guide compliant?
Yes — DPA, EU residency, erasure rights.
Compliance-ready
Tailor Size Guide ships with DPA, EU residency, and CCPA-equivalent controls.