GPSR & EAA Compliance for Shopify Stores
Shopify makes it relatively straightforward to meet EU GPSR and EAA requirements — if you know where to look. This guide covers every step with exact admin paths.
Overview
What Shopify merchants need to know
Shopify itself is a platform — EU compliance is your responsibility as the merchant. Shopify provides the tools (metafields, policy pages, cookie banner), but it's up to you to configure them correctly and populate them with accurate information.
The two key regulations are GPSR (in force December 2024) and EAA (deadline June 2025). Both require changes to your product pages, legal pages, and store configuration.
Shopify's automatic compliance tools are limited. The cookie banner and policy generator are helpful starting points, but most GPSR requirements (manufacturer info, product identifiers) require manual configuration or theme customisation.
Step by step
6 steps to EU compliance on Shopify
01
Add manufacturer information via metafields
Products → [Product] → Metafields
GPSR requires manufacturer name, postal address, and electronic contact details to appear on product pages. In Shopify, the cleanest way is to create custom metafields and display them in your theme.
How to do it: Go to Settings → Custom data → Products. Create metafields for "Manufacturer name", "Manufacturer address", and "Manufacturer contact". Then edit your product template to display them.
02
Add product identifiers (model/batch numbers)
Products → [Product] → SKU or Metafields
Each product needs a visible identifier. Use the built-in SKU field if it's already displayed on your product pages, or create a "Product reference number" metafield for better control.
How to do it: If the SKU isn't visible in your theme, add a metafield called "Product reference" and display it near the product title or in the description.
03
Update your legal pages
Settings → Policies
Shopify has a built-in policies section. Make sure your Privacy Policy, Terms of Service, Refund Policy, and Shipping Policy are accurate, up to date, and linked in your footer.
How to do it: Shopify's auto-generated policies are a starting point only — they often miss EU-specific requirements. Review them against GDPR and GPSR requirements, or use a legal template.
04
Enable GDPR-compliant cookie consent
Online Store → Preferences → Cookie banner
From June 2023, Shopify has a built-in GDPR cookie banner. Enable it under Online Store → Preferences. Make sure it's set to require consent before loading non-essential cookies (analytics, ads).
How to do it: If you use third-party analytics (Google Analytics, Meta Pixel), these must not load until the user accepts. Check that your banner configuration actually blocks these before consent.
05
Add a visible contact channel
Contact page + footer
Your store must have a clear way for customers to report product safety concerns. A contact page with an email address or form is sufficient — but it must be easy to find from any product page.
How to do it: Link your contact page in the footer and consider adding "Contact us" to your main navigation. A "Contact for product safety" email in the footer is ideal.
06
Fix accessibility issues (EAA)
Theme → Images + Theme settings
For EAA compliance, all product images need descriptive alt text, your theme must be keyboard navigable, and text must meet WCAG 2.1 AA colour contrast ratios.
How to do it: Add alt text to every product image via Products → [Product] → Images → Edit alt text. For contrast and keyboard navigation, check your theme's accessibility settings or choose a WCAG-certified theme.
Shopify apps
Useful tools for Shopify compliance
These tools can help, but none fully automate GPSR compliance. You still need to populate product information manually.
Shopify Cookie Banner
Built-inGDPR cookie consent built into Shopify. Enable in Online Store → Preferences.
Metafields Guru
Free appManage custom metafields for manufacturer info, product identifiers, and more.
Accessibility Enabler
Paid appAdds accessibility widget and helps meet some WCAG requirements. Not a complete solution.