Consent Management
The Chord web pixel integrates native consent management features from Shopify and the CDP so you can accurately comply with your customer's privacy preferences.
On your Shopify storefront, you will typically gather data processing permissions from your customers using Shopify's Customer Privacy API. It's available on both Shopify themes and headless Shopify sites.
When you install the Chord web pixel on your Shopify storefront, you can configure the customer privacy settings for the web pixel. These settings control whether the Chord tracking pixel will capture data and send it to the CDP. For example, to require customer consent for data collection for marketing and analytics purposes before any data is captured, you can adjust your web pixel settings to load the web pixel only after receiving this consent.
The Chord web pixel also includes granular information about the customer's data processing permissions on every tracking event that goes to the CDP. In the CDP, you can configure how these customer permissions should impact data delivery to CDP destinations. For example, if you use a destination where data could be considered as being sold, you can configure consent in the CDP to ensure that tracking events from customers who have consented to their data being sold are the only ones sent to this specific CDP destination.
Please reach out to a local attorney who may be better equipped to answer any specific questions you may have concerning data privacy laws and applicability.
You can configure the customer privacy setting of the Chord web pixel on your store. This will determine when the pixel code actually executes and can collect tracking data.
To configure the customer privacy setting for the web pixel, go to Settings > Customer events in your Shopify store admin and select the Chord web pixel. Review the customer privacy settings. There are two main categories:
- Permission: Controls whether the pixel collects data in cases where customer permission has been granted.
- Data sale: Controls whether the pixel collects data in cases where the customer has opted out of their data being sold.
Configure the settings and select Save. The settings will take effect immediately, so make sure you are gathering customer preferences with the Customer Privacy API before you do so.
For more details about the functionality, see Shopify's documentation on pixel customer privacy settings and an overview of Shopify customer privacy.
The Chord web pixel automatically adds customer privacy preferences from Shopify's Customer Privacy API to the consent object on Segment events, so you can use Segment's consent management to enforce the customer's privacy preferences when routing events to Segment destinations. This won't have an impact until you configure consent management in Segment.
Shopify’s Customer Privacy API supports four categories of consent from users:
- analytics: Customer analytics about how the storefront was used and interactions made on the storefront. By default, this preference is collected by Shopify’s cookie banner as “performance cookies.”
- marketing: Marketing, attribution and targeted advertising from the merchant. By default, this preference is collected by Shopify’s cookie banner as “marketing cookies.”
- preferences: Customer preferences such as language, currency, size, and more. By default, this preference is collected by Shopify’s cookie banner as “preference cookies.”
- sale_of_data: Sharing data with third parties, usually for behavioral advertising. By default, this preference is collected by Shopify’s data sales opt-out page.
To add the four categories below as category mappings in your Segment workspace, go to Privacy > Consent Management > Create category. You can customize the “Category name” for these category mappings, but the “Category ID” must be exactly the values listed below to connect preferences from Shopify to Segment:
Category Name (can be customized) | Category ID |
|---|---|
Performance cookies | analytics |
Marketing cookies | marketing |
Preference cookies | preferences |
Sale of data | sale_of_data |
For each category, choose the mapped destinations. Mapping a destination to a category means that the destination will only receive the Segment event if Shopify’s Customer Privacy API reports that processing if allowed for that category.
Once you’ve created and enabled the four categories, you should see this in Segment:
