Skip to main content

Data Handling

How GTM Assistant Handles Your Data

No Customer Data Storage​

GTM Assistant does not store any customer data. The app solely functions as a tool to manage and deploy tracking tags through Google Tag Manager (GTM). All event and tracking data is passed directly from your Shopify store to GTM, and then to analytics platforms like Google Analytics, Meta Pixel, Twitter, and Google Ads.

Direct Data Transmission​

When a customer interacts with your store (e.g., makes a purchase or views a page), GTM Assistant enables data to flow directly from Shopify to GTM and from GTM to your chosen analytics platforms, without GTM Assistant acting as an intermediary. This setup ensures that customer data is handled securely and only reaches the platforms you have authorized.

Compliance with GDPR and CCPA​

GTM Assistant is designed to operate within the bounds of data privacy laws, such as GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act). Since GTM Assistant does not retain or process customer data itself, it aligns with privacy regulations, allowing you to stay compliant while collecting valuable analytics.

GTM Assistant leverages Shopify’s internal consent management system through Shopify's WebPixel API. This means that GTM Assistant respects the consent preferences set by your customers through Shopify’s built-in consent tools, ensuring that tracking occurs only if consent is granted by the user.

Shopify’s WebPixel API provides a reliable and standardized approach to manage customer consent for tracking. When a customer visits your store, Shopify's consent system determines whether tracking tags are allowed to fire based on the user’s consent preferences.
GTM Assistant integrates seamlessly with this consent system, so you don’t have to worry about additional consent configurations. If a customer opts out of tracking, GTM Assistant ensures that no tags are fired, honoring their choice.

Note: Using Shopify’s consent mode ensures compliance with global privacy laws by respecting customer consent preferences, reducing the risk of tracking data without user permission.

Secure Data Handling through Google Tag Manager​

GTM Assistant operates via Google Tag Manager, which is known for its secure and trusted framework for managing tags. GTM uses advanced security protocols to safeguard data transmission and prevent unauthorized access, ensuring that your data remains secure at all times.

Best Practices for Data Privacy and Consent Compliance

Review and Manage Your Tags Regularly​

Periodically check the tags you’ve configured through GTM Assistant to ensure they align with your privacy policy and Shopify’s consent requirements. Disable any unnecessary tags or adjust triggers as needed to respect customer privacy.

Shopify provides a built-in consent banner option to capture customer consent for tracking activities. Make sure this banner is enabled, especially if you’re operating in regions where consent is legally required (e.g., European Union under GDPR).

Transparency in Your Privacy Policy​

Update your privacy policy to reflect the tracking methods used on your store, including GTM Assistant and any tags configured for Google Analytics, Meta Pixel, etc. Clearly explain to customers how their data is collected, processed, and used, and link to Shopify’s consent management practices.

Restrict Data Collection as Necessary​

Avoid collecting unnecessary or sensitive customer information in your tags. Configure GTM Assistant and GTM to capture only the essential data needed for analytics and advertising, and ensure compliance with data protection regulations.

Need More Information?

If you have any questions about GTM Assistant’s data privacy features, or if you need assistance with setting up tags that align with Shopify’s consent mode, feel free to reach out to our support team at support@webgarh.co.in.

Remember: GTM Assistant respects Shopify’s consent mode to ensure that tracking complies with privacy regulations. This integration allows you to focus on obtaining valuable analytics without compromising on data privacy or compliance.