Privacy and retention

Plan your workflow, check the details, and deliver with a clear record.

Private Customer Documents on Shopify: A Delivery Checklist

Review private customer-document delivery on Shopify with a practical checklist for file contents, recipients, storage, access, and retention.

Distinguish Shopify’s public Files area from customer-specific download delivery, with a storage decision matrix and access-verification checklist.

Check Google Drive permissions independently of a Shopify delivery link, using a two-layer access matrix and a controlled recipient test.

Reduce personal information in customer-file names with synthetic before-and-after examples and a filename exposure checklist.

Separate file retention from link expiry with a two-clock worksheet and scenarios for deletion, external access, and replacement links.

Evaluate forwarded download links with a controlled test protocol and distinguish link access from copies customers have already saved.

Audit staff access to Shopify customer files with a system-by-role worksheet and checks for shared folders, support copies, and former staff.

Plan customer-file deletion across Shopify, app storage, production folders, external providers, and support copies with a confirmation checklist.

Create a merchant backup and recovery plan for custom digital deliverables with a restore drill, retention decisions, and clear ownership.

Interpret digital-download tracking accurately with an evidence table that separates sending, downloading, reading, identity, and acceptance.