[Skip to main content](#vessel-content) # GDPR issues ## - **[panefs](/forum/user/35481-panefs "View panefs's Profile")** - [![panefs's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/35481-panefs "View panefs's Profile") Topic Author - [ Offline](/forum/user/35481-panefs) Less More - Posts: 105 - Thank you received: 6 - - - 8 years 8 months ago [\#288593](#288593) by [panefs](/forum/user/35481-panefs "View panefs's Profile") *[GDPR issues](/forum/2-general-talk-about-hikashop/893915-gdpr-issues#288593 "-- HikaShop version -- : HikaShop Business: 3.3.0 -- Joomla version -- : 3.8.5 -- PHP version -- : 7 Hi. The GDPR will be enforced in 3 months from now and most of us who reside in the EU are trying to sort through the mess and get prepared. I'd like to share 2 thoughts that came into my mind today and ask for assistance: 1. When a user completes an order, Hikashop sends an email about the creation of the order to both the buyer and the seller. Then, when the buyer completes the payment (e.g. on PayPal), another email about the completion of the order is sent to both parties. Here's the GDPR-related issue: these unencrypted emails display the buyer's billing address. Some customers may get angry about it. My question is: is there a way to stop Hikashop from displaying the billing address in these emails? 2. The second concern is about the collection of the IP of non-registered users. When a user who hasn't logged in adds a product to the cart, Hikashop stores the user's IP. This is very different from collecting a buyer's IP: registered users or guest buyers have already agreed to our terms and conditions, which inform them about the collection and storage of the buyer IPs when they place their orders. But casual visitors who browse our product pages and try our shopping carts, have not given their consent about it. Is there a setting to turn off this feature? Thank you.")* was created by *[panefs](/forum/user/35481-panefs "View panefs's Profile")* -- HikaShop version -- : HikaShop Business: 3.3.0 -- Joomla version -- : 3.8.5 -- PHP version -- : 7 Hi. The GDPR will be enforced in 3 months from now and most of us who reside in the EU are trying to sort through the mess and get prepared. I'd like to share 2 thoughts that came into my mind today and ask for assistance: 1. When a user completes an order, Hikashop sends an email about the creation of the order to both the buyer and the seller. Then, when the buyer completes the payment (e.g. on PayPal), another email about the completion of the order is sent to both parties. Here's the GDPR-related issue: these unencrypted emails display the buyer's billing address. Some customers may get angry about it. My question is: is there a way to stop Hikashop from displaying the billing address in these emails? 2. The second concern is about the collection of the IP of non-registered users. When a user who hasn't logged in adds a product to the cart, Hikashop stores the user's IP. This is very different from collecting a buyer's IP: registered users or guest buyers have already agreed to our terms and conditions, which inform them about the collection and storage of the buyer IPs when they place their orders. But casual visitors who browse our product pages and try our shopping carts, have not given their consent about it. Is there a setting to turn off this feature? Thank you. Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzItZ2VuZXJhbC10YWxrLWFib3V0LWhpa2FzaG9wLzg5MzkxNS1nZHByLWlzc3Vlcz90bXBsPW1hcmtkb3du) or [Create an account](/register) to join the conversation. - **[panefs](/forum/user/35481-panefs "View panefs's Profile")** - [![panefs's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/35481-panefs "View panefs's Profile") Topic Author - [ Offline](/forum/user/35481-panefs) Less More - Posts: 105 - Thank you received: 6 - - - 8 years 8 months ago [\#288606](#288606) by [panefs](/forum/user/35481-panefs "View panefs's Profile") Replied by *[panefs](/forum/user/35481-panefs "View panefs's Profile")* on topic *[GDPR issues](/forum/2-general-talk-about-hikashop/893915-gdpr-issues#288606 "-- HikaShop version -- : HikaShop Business: 3.3.0 -- Joomla version -- : 3.8.5 -- PHP version -- : 7 Hi. The GDPR will be enforced in 3 months from now and most of us who reside in the EU are trying to sort through the mess and get prepared. I'd like to share 2 thoughts that came into my mind today and ask for assistance: 1. When a user completes an order, Hikashop sends an email about the creation of the order to both the buyer and the seller. Then, when the buyer completes the payment (e.g. on PayPal), another email about the completion of the order is sent to both parties. Here's the GDPR-related issue: these unencrypted emails display the buyer's billing address. Some customers may get angry about it. My question is: is there a way to stop Hikashop from displaying the billing address in these emails? 2. The second concern is about the collection of the IP of non-registered users. When a user who hasn't logged in adds a product to the cart, Hikashop stores the user's IP. This is very different from collecting a buyer's IP: registered users or guest buyers have already agreed to our terms and conditions, which inform them about the collection and storage of the buyer IPs when they place their orders. But casual visitors who browse our product pages and try our shopping carts, have not given their consent about it. Is there a setting to turn off this feature? Thank you.")* Is it safe to remove this code from the order creation & order notification emails, to have the billing address removed from these emails? <table class="w550" border="0" cellspacing="0" cellpadding="0" width="550" style="margin-top:10px;font-family: Arial, Helvetica, sans-serif;font-size:12px;line-height:18px;"> <tr> <!--{IF:BILLING_ADDRESS}--><td style="color:#1c8faf !important;font-size:12px;font-weight:bold;">{TXT:BILLING_ADDRESS}</td><!--{ENDIF:BILLING_ADDRESS}--> <!--{IF:SHIPPING}--><!--{IF:SHIPPING_ADDRESS}--><td style="color:#1c8faf !important;font-size:12px;font-weight:bold;">{TXT:SHIPPING_ADDRESS}</td><!--{ENDIF:SHIPPING_ADDRESS}--><!--{ENDIF:SHIPPING}--> </tr> <tr> <!--{IF:BILLING_ADDRESS}--><td>{VAR:BILLING_ADDRESS}</td><!--{ENDIF:BILLING_ADDRESS}--> <!--{IF:SHIPPING}--><!--{IF:SHIPPING_ADDRESS}--><td>{VAR:SHIPPING_ADDRESS}</td><!--{ENDIF:SHIPPING_ADDRESS}--><!--{ENDIF:SHIPPING}--> </tr> </table> Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzItZ2VuZXJhbC10YWxrLWFib3V0LWhpa2FzaG9wLzg5MzkxNS1nZHByLWlzc3Vlcz90bXBsPW1hcmtkb3du) or [Create an account](/register) to join the conversation. - **[nicolas](/forum/user/63-nicolas "View nicolas's Profile")** - [![nicolas's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar63.png?1793428657)](/forum/user/63-nicolas "View nicolas's Profile") - [ Offline](/forum/user/63-nicolas) Less More - Posts: 86322 - Thank you received: 14281 - - 8 years 8 months ago [\#288609](#288609) by [nicolas](/forum/user/63-nicolas "View nicolas's Profile") Replied by *[nicolas](/forum/user/63-nicolas "View nicolas's Profile")* on topic *[GDPR issues](/forum/2-general-talk-about-hikashop/893915-gdpr-issues#288609 "-- HikaShop version -- : HikaShop Business: 3.3.0 -- Joomla version -- : 3.8.5 -- PHP version -- : 7 Hi. The GDPR will be enforced in 3 months from now and most of us who reside in the EU are trying to sort through the mess and get prepared. I'd like to share 2 thoughts that came into my mind today and ask for assistance: 1. When a user completes an order, Hikashop sends an email about the creation of the order to both the buyer and the seller. Then, when the buyer completes the payment (e.g. on PayPal), another email about the completion of the order is sent to both parties. Here's the GDPR-related issue: these unencrypted emails display the buyer's billing address. Some customers may get angry about it. My question is: is there a way to stop Hikashop from displaying the billing address in these emails? 2. The second concern is about the collection of the IP of non-registered users. When a user who hasn't logged in adds a product to the cart, Hikashop stores the user's IP. This is very different from collecting a buyer's IP: registered users or guest buyers have already agreed to our terms and conditions, which inform them about the collection and storage of the buyer IPs when they place their orders. But casual visitors who browse our product pages and try our shopping carts, have not given their consent about it. Is there a setting to turn off this feature? Thank you.")* Hi, 1. Yes, you can remove these to remove the billing and shipping addresses from the notification emails. 2. There is no setting. But we could easily add such setting. Note though that even if HikaShop doesn't log the IP, the IP is still logged in the "access log" of your web server. So I'm not sure that it would change anything ? Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzItZ2VuZXJhbC10YWxrLWFib3V0LWhpa2FzaG9wLzg5MzkxNS1nZHByLWlzc3Vlcz90bXBsPW1hcmtkb3du) or [Create an account](/register) to join the conversation. - **[panefs](/forum/user/35481-panefs "View panefs's Profile")** - [![panefs's Avatar](https://www.hikashop.com/media/kunena/core/svg/person.svg)](/forum/user/35481-panefs "View panefs's Profile") Topic Author - [ Offline](/forum/user/35481-panefs) Less More - Posts: 105 - Thank you received: 6 - - - 8 years 8 months ago [\#288642](#288642) by [panefs](/forum/user/35481-panefs "View panefs's Profile") Replied by *[panefs](/forum/user/35481-panefs "View panefs's Profile")* on topic *[GDPR issues](/forum/2-general-talk-about-hikashop/893915-gdpr-issues#288642 "-- HikaShop version -- : HikaShop Business: 3.3.0 -- Joomla version -- : 3.8.5 -- PHP version -- : 7 Hi. The GDPR will be enforced in 3 months from now and most of us who reside in the EU are trying to sort through the mess and get prepared. I'd like to share 2 thoughts that came into my mind today and ask for assistance: 1. When a user completes an order, Hikashop sends an email about the creation of the order to both the buyer and the seller. Then, when the buyer completes the payment (e.g. on PayPal), another email about the completion of the order is sent to both parties. Here's the GDPR-related issue: these unencrypted emails display the buyer's billing address. Some customers may get angry about it. My question is: is there a way to stop Hikashop from displaying the billing address in these emails? 2. The second concern is about the collection of the IP of non-registered users. When a user who hasn't logged in adds a product to the cart, Hikashop stores the user's IP. This is very different from collecting a buyer's IP: registered users or guest buyers have already agreed to our terms and conditions, which inform them about the collection and storage of the buyer IPs when they place their orders. But casual visitors who browse our product pages and try our shopping carts, have not given their consent about it. Is there a setting to turn off this feature? Thank you.")* Thank you very much. It's think **it's worth** adding a setting that stops Hikashop from logging the IPs of casual visitors. I am quoting a section from this analysis: [ www.ctrl.blog/entry/gdpr-web-server-logs](https://www.ctrl.blog/entry/gdpr-web-server-logs) > You can’t collect and store any personal data without having obtained, and being able to document that you obtained, consent from the persons you’re collecting data from. You can, however, collect and store personal data as part of web servers logs for the purposes of detecting and preventing fraud and unauthorized access and maintaining the security of your systems. Based on this analysis, it appears that access logs and server logs could, under certain circumstances, be considered legitimate. If we disabled access logs (and error logs) on our servers, what would be the impact on Hikashop? Would Hikashop still be able to store the buyer's IP (which is a requirement in the EU Directive 2008/8/EC to those who sell digital goods)? Similarly to the 2015 VAT changes, GDPR is a nightmare for small businesses, only in a much grander scale. Large corporations have the means to deal with the new requirements. Smaller fishes (like most of us who use Joomla and Hikashop) are going to have a tough time, while trying to adapt. The following user(s) said Thank You: [fengel](/forum/user/37465-fengel "View fengel's Profile") Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzItZ2VuZXJhbC10YWxrLWFib3V0LWhpa2FzaG9wLzg5MzkxNS1nZHByLWlzc3Vlcz90bXBsPW1hcmtkb3du) or [Create an account](/register) to join the conversation. - **[nicolas](/forum/user/63-nicolas "View nicolas's Profile")** - [![nicolas's Avatar](https://www.hikashop.com/media/kunena/avatars/resized/size144/users/avatar63.png?1793428657)](/forum/user/63-nicolas "View nicolas's Profile") - [ Offline](/forum/user/63-nicolas) Less More - Posts: 86322 - Thank you received: 14281 - - 8 years 8 months ago [\#288646](#288646) by [nicolas](/forum/user/63-nicolas "View nicolas's Profile") Replied by *[nicolas](/forum/user/63-nicolas "View nicolas's Profile")* on topic *[GDPR issues](/forum/2-general-talk-about-hikashop/893915-gdpr-issues#288646 "-- HikaShop version -- : HikaShop Business: 3.3.0 -- Joomla version -- : 3.8.5 -- PHP version -- : 7 Hi. The GDPR will be enforced in 3 months from now and most of us who reside in the EU are trying to sort through the mess and get prepared. I'd like to share 2 thoughts that came into my mind today and ask for assistance: 1. When a user completes an order, Hikashop sends an email about the creation of the order to both the buyer and the seller. Then, when the buyer completes the payment (e.g. on PayPal), another email about the completion of the order is sent to both parties. Here's the GDPR-related issue: these unencrypted emails display the buyer's billing address. Some customers may get angry about it. My question is: is there a way to stop Hikashop from displaying the billing address in these emails? 2. The second concern is about the collection of the IP of non-registered users. When a user who hasn't logged in adds a product to the cart, Hikashop stores the user's IP. This is very different from collecting a buyer's IP: registered users or guest buyers have already agreed to our terms and conditions, which inform them about the collection and storage of the buyer IPs when they place their orders. But casual visitors who browse our product pages and try our shopping carts, have not given their consent about it. Is there a setting to turn off this feature? Thank you.")* Hi, Thanks for your input. Adding a setting could be worth it yes. The following user(s) said Thank You: [fengel](/forum/user/37465-fengel "View fengel's Profile") Please [Log in](/login?return=aHR0cHM6Ly93d3cuaGlrYXNob3AuY29tL2ZvcnVtLzItZ2VuZXJhbC10YWxrLWFib3V0LWhpa2FzaG9wLzg5MzkxNS1nZHByLWlzc3Vlcz90bXBsPW1hcmtkb3du) or [Create an account](/register) to join the conversation. Board Categories HikaShop Install & Update Product & Category Display Content Creation Sales and Orders Orders management Reports & Statistics Customers Checkout Payment Methods Shipping Methods Import & Export (CSV, XLS…) Specific Features Affilation Taxes Wishlist Vote Carousel & Slider Mass Actions Filters & Search Discount & Coupon Feature Request Integrations Showcase General Talk about HikaShop Development HikaShop 3.0 Beta Translation Commercial Jobs HikaShop Components HikaMarket Market: Feature requests Market: How to? Market: Bug Report HikaSerial General talk about HikaSerial Serial: Bug Report Serial: How to? Support en Français de HikaSerial (French Support) HikaSubscription HikaAuction Auction: Feature requests Auction: How to? Auction: Bug report Hikashop around the world Support en Français (French Support) Russian FAQ. Курс выживания с Hikashop. Частые вопросы и о Расширения Hikashop Наши сайты на Hikashop 日本語版サポート(Japanese Support) Thai German Archives Bug Report How to? [](/forum/topics/feed/mode-topics?format=feed&type=rss) Time to create page: 0.093 seconds [Powered by](/forum/credits) [Kunena Forum](https://www.kunena.org)