When someone formally requests a copy of their personal data, or asks for it to be deleted, having a working, tested tool to fulfil that request quickly matters — both because most privacy regulations impose a response deadline, and because scrambling to manually assemble scattered data under time pressure is a poor way to handle something that should be routine.
GDPR data export & erasure tooling setup
Data export and erasure tooling that covers WooCommerce and forms, not just WordPress core's defaults.
- Full backup taken before we start
- If we can’t fix it, you get your money back
- We never ask for your own password
What we need from you
- Confirmation of which regulations apply to your visitors, since specific requirements can vary
- Access to configure the relevant tooling (often built into WordPress core, sometimes via a dedicated plugin)
- Any custom data sources (WooCommerce, form plugins, custom fields) that also need to be included
This or something else?
| You want proactive, self-service data export and erasure tooling set up | This fix covers it |
| You’ve already received a specific request and need it handled now, without the ongoing tooling | User data export & deletion request handling, the one-off version |
| You want a report on what trackers and cookies you’re using, not data export tooling | Cookie audit & categorisation report |
| You want consent records specifically stored and retrievable, not personal data broadly | Consent record storage configuration |
What we do
- Configure WordPress’s built-in data export and erasure tools, or a suitable plugin if more is needed
- Extend coverage to WooCommerce, form submissions, and custom fields beyond WordPress core defaults
- Test a full export request end to end for completeness
- Test a full erasure request end to end, confirming appropriate data is actually removed
- Confirm any legitimately retained data (like financial records) is clearly handled and explained
- Document the process for your team to use going forward
What is included
- Configured, tested data export and erasure tooling
- Coverage extended beyond WordPress core defaults to your actual data sources
- A documented process for handling future requests
- Verification that legitimately retained data is correctly handled
Not included
- Handling a specific request that’s already come in, a separate fix if you want it done as a one-off
- Legal advice on your specific compliance obligations
- Ongoing management of incoming requests as a standing service
- A full cookie or tracker audit, a separate, related fix
Questions about this fix
Does WordPress already have this built in?
WordPress core includes basic data export and erasure tools, but they often don't automatically cover WooCommerce orders, form plugin submissions, or custom fields without additional configuration, which is what this fix extends.
What happens to data I'm legally required to keep, like order records for tax purposes?
We configure the tooling to clearly identify and explain what's retained and why, rather than either deleting everything indiscriminately or silently keeping more than necessary.
Will this handle requests automatically, with no involvement from me?
The tooling makes fulfilling a request faster and more reliable, but reviewing and confirming each request before it's actioned is still a reasonable, recommended step rather than a fully unattended process.
How do I know this actually covers everything, not just WordPress's default data?
We test full export and erasure requests specifically against your actual data sources — WooCommerce, forms, custom fields — during setup, rather than assuming default coverage is sufficient.
Is this legally required for my site?
That depends on where your visitors are located and which regulations apply — worth confirming with your own advisor, though having working tooling in place is broadly good practice regardless of the specific legal threshold.
Related fixes
If this is the second time this year
A bad update breaking the site is a symptom of updates not being tested first. Care plans run every update on a staging clone before it reaches your live site, which is the actual fix for this happening again.
Your access, your rules
Create a separate admin account for us and delete it when we are done. For anything else, we get in touch and agree a method — never a form field on this site, never by reply to an email.
We back up first, always
Before anything is touched we take a full backup and keep it for 30 days. If a fix goes wrong, we put the site back exactly as it was.
If it is not what you bought
If the problem turns out smaller than what you ordered, we refund the difference. If it is bigger, we stop and send a quote before doing any extra work.
If we cannot fix it
You get back what we received. Diagnosis is on us — you only pay when the problem is actually solved. The payment processor takes its fee before the money reaches us, so we never hold it and it is not ours to return. That is true here as everywhere else.
If it comes back
Reply within seven days of delivery and we put it back on the bench at no cost. The fix is not finished until it holds.
What we are responsible for
If something goes wrong with a fix, our responsibility is limited to what you paid for it. We take a full backup first so mistakes can be undone, and we tell you before doing anything outside what you bought.