What a Shopify merchant needs to do about customer data: privacy policies, cookie consent, and data requests under laws such as the GDPR and the CCPA. These guides point to Shopify's tools and to the regulators' own pages, and keep to practical steps rather than legal opinion.