Privacy Requests
Review customer access and erasure requests, download exports and record delivery
Location: Sidebar > Privacy requests. Available on every plan.
CapFlow records Shopify customer data-access and erasure requests in a durable inbox. Some processing runs in the background, but a request is not necessarily complete just because a webhook was accepted. Review the inbox and its deadlines.
Customer data access
- Open the request in Privacy requests.
- When it is Ready or Exported, select Download customer data.
- Check the customer’s identity and deliver the export through your own secure process. The app does not email the download to the customer automatically.
- Record the delivery reference under Next action and select Record action. Do not put customer details in the reference field.
- Handle and remove your downloaded copy according to your organisation’s policy.
The export can include relevant booking, membership, fee and waitlist facts. It excludes bearer credentials and internal checkout data. Downloads require authenticated merchant access; they are not public links.
Erasure and review states
Automatic processing may pause when identity is ambiguous, an access request is still open, a checkout is active, fee records need a decision or a migration still uses the data. Resolve the displayed issue or contact support with the request reference, then use the offered retry action. Do not approve erasure without checking the relevant retention obligation.
External review means database processing has finished but CapFlow support still has provider cleanup to verify. It is not a promise that copies held by email, analytics or backup providers disappeared immediately. Store termination follows the same distinction between database processing and provider cleanup; uninstalling the app alone does not prove all deletion is complete.
Erasing a customer’s waitlist data also removes its queued notifications and releases live unclaimed offers. Completed/cancelled/expired waitlist entries and their notification records are otherwise removed after 90 days. Other booking records follow the applicable merchant instructions and requirements.
Good operational habits
Check inbox alerts and due dates, keep notes free of unnecessary customer information, and contact hello@tinyagency.io with the request reference if you cannot resolve a case. The merchant handles its customer response; CapFlow provides the records and processing workflow.