GDPR Delete orders

Questions
1

Two questions concerning section “Delete orders” in this page https://docs.litium.com/documentation/architecture/gdpr-support

Text says “Historical orders can be deleted automatically”, is this a scheduled task or how do we set up this? (or do you mean it is “automatically” deleted when clicking button to delete in control panel)

When deleting orders, will also connected persons in Relations be deleted (if such connection exists)?

Litium version: 4.8.9

2

Setup is avaliable in control panel:

image
image.png1165×630 22.8 KB

(image from L6 but should look similar in 4.8)

This delete does not delete the customer.

3

And yes it is a scheduled task

4

Ok, thanks!
But when orders are deleted by scheduled task we will still store personal information for customers on those orders?
Don’t you agree that customer info should also be removed?
Or should this be a separate task?

5

You may extend to delete the personal info.

If customer info should be removed, it is best to remove from the customer.

The order delete is a requirement in GDPR that says we should not keep data that is too old.,

But the customer may have newer orders.

One improvement would be, to delete the customer also if there are no new orders.

6

Ok, how do I extend to delete personal info?

7
8

The scheduled task that delete orders cannot be extended.

But you could

  1. Create a new scheduled task that regularly deletes all customers that do not have any orders.
  2. Add a listener to the event ModuleECommerce.Instance.EventManager.OrderDeleted and if the deleted order is the only one the customer has then also delete the customer.