Privacy compliance
GA4 sets cookies and collects information about each visitor's browsing. India's Digital Personal Data Protection Act (DPDP) and laws in other countries expect you to tell visitors about this, and some (such as GDPR in Europe) require their consent first.
What CartWhizz does for you
- Nothing is sent to Google until you switch the module on with a valid ID.
- If you also switch on Cookie Consent, GA4 is held back until the visitor accepts analytics cookies. If they decline, GA4 never loads for them.
- Customer names, emails, phone numbers and addresses are not sent to GA4. Orders are identified by an order reference only.
What you need to do
- Mention Google Analytics in your privacy policy (My store → Pages): what it collects (pages visited, device, approximate location, purchases), that Google processes it, and how long it is kept.
- If you sell to Europe or want to be careful, switch on Cookie Consent.
- In GA4, Admin → Data settings → Data retention, choose how long Google keeps the data (2 or 14 months for most stores).
- Leave Google signals off in GA4 unless your privacy policy mentions cross-device tracking.
CartWhizz does not send Google's "Consent Mode" signals. If you need them, add them yourself with Tracking Scripts.
If a customer asks you to delete their analytics data, use GA4's Admin → Data deletion requests.