LGPD Brasil for Magento 2

How to Comply with the LGPD

The legislative document is based on the rights that Brazilian customers have in terms of personal data. As a merchant, you need to show that you respect these rights and provide shoppers with a full scope of protection. Inform customers about the purpose of data collection and technologies you use, get their consent for further processing and let them manage personal data using LGPD extension for Magento 2.

Upgrade cookie policy

LGPD indicates that Magento 2 stores in Brazil need to follow the requirements regarding the cookie policy. The proven practice for compliance is to inform shoppers about the purposes and technologies of data collection and get consents for each of the activities. With the included Cookie Consent features, customers can find out why cookies are collected and how they are used.

NEW: Select a bar style

NEW: Specify cookie details

Change bar design

Manage given consents

NEW: Select a bar style

Choose 1 of 3 bar styles to fit your store and get consents at the first interaction: enable a bar with toggles, a popup bar or a sticky bar at the top or footer of the page. Each pop-up window contains detailed info about each cookie group, and customers can allow or forbid collecting any of them right in the popup.

NEW: Specify cookie details

Inform visitors what cookies your store collects. By clicking the 'More Information' link in any popup style, shoppers can find out a cookie provider, description, lifetime, etc. The more details they know, the higher the chance of getting consent is.

Change bar design

Each store is unique, and it's hard to find a cookie bar that will suit the store and catch customer attention at the same time. Our cookie bar deals with both challenges: use multiple customization options to make the mare look native and adjust buttons and links to motivate visitors to leave consents.

Manage given consents

All given consents are collected in the admin panel. You may check all the allowed cookies from the backend, where types and dates of consents are displayed. This documentation protects your store and lets you process cookies lawfully.

Take all measures to cover customers’ rights:
start with awareness & confirmation

Show the policies your store follows and gather consents for each policy separately

Display checkboxes for users from Brazil only or regardless of the country

Make consents obligatory or optional

Add checkboxes to various pages and forms, including the newsletter subscriptions field

 

Show popups instead of redirects to CMS pages

Now, if you add links to checkboxes, shoppers won't have to open the linked CMS pages separately - the pages will be shown in popups. Thus, visitors can read and accept various policies on the same page.

React to any inquiries on the part of a customer

The legislative act obliges store owners to satisfy any customer requests regarding personal data. Magento 2 LGPD module lets you take all protective measures and deal with such requests effectively. Thus, your customers can:

Get access to policy

Get access to the data

Anonymize the data

Have the data deleted

Revoke consents

NEW: Show DPO contacts

Transfer the data

Get access to policy

As awareness and transparency are key principles of the law, the extension lets shoppers find all the info about store policy in a popup or a separate CMS page.

Get access to the data

Article 18 outlines that online users must have an opportunity to get all the data collected about them. They can do it right in their accounts: after entering the password they get a structured file. No actions from the admin required.

Anonymize the data

The Magento 2 compliance with LGPD implies that Brazilians can block the processing of their data to stay anonymous. And again they need to hit just one button. The module also shows a note on how anonymization is performed.

Have the data deleted

Data removal is also an obligatory option for a fully compliant store. That’s why any user can delete an account together with all the data collected. You see such requests in a separate backend grid and may either approve or deny it.

Revoke consents

All consents that customers give are displayed in the account. The feature is designed to let shoppers opt-in or opt-out the consents and match the Article 18 requirement, as the ‘Revocation’ is also must-have.

NEW: Show DPO contacts

As it is specified in the legislative documents, store visitors should have the ability to contact a Data Protection Officer in case they have questions. Now they can find the necessary info in Customer Accounts, while you can manage it from the backend.

Transfer the data

Customers may want to pass personal data to 3rd-party sources, and they have the right to make such requests. Data portability is available from the admin panel - you can download customers’ data and transfer it if requested.

Organize documentation to protect business

Under Article 5, processors are obliged to keep records of personal data processing operations performed by them, especially when based on legitimate interest. Keeping documentation protects not only customers’ rights, but also your rights as a merchant: in cases of security incidents you may find the necessary data and avoid sanctioning.

Keep records of all consents

Delete irrelevant data

Process deletion requests

Save the required data

NEW: Process customer data as admin

Keep records of all consents

Collect all privacy consents in a separate space. Here you can view and filter the consents given by both registered and guest visitors. Delete unnecessary data using bulk actions if needed.

Delete irrelevant data

Another point of lawful processing indicates that stores don’t have to keep customers’ data that is no longer needed. To cover this aspect, you can configure the automatic deletion of inactive accounts after the specified period of time.

Process deletion requests

All requests (including automatic ones) get to a separate grid. Here you can monitor, approve or deny each request. To speed up processing, bulk actions are also applicable.

Save the required data

When you approve a deletion request, all data is removed. But if it is deleted from the recent documents, you may face issues with other institutions, such as tax control. To match these two points, configure automatic deletion in recent documents only after a specific period.

NEW: Process customer data as admin

Now all actions that customers can perform in their accounts can be done from the admin panel as well. Thus, by request, you as an admin can anonymize, download and delete the personal data of a particular customer.