Removing old data because of gdpr rules

Hi,

The regarding email data, I suppose that you're talking about the emails in the Customers>Emails history menu.
These are handled by the email history plugin. Edit its settings via the Joomla plugins manager and you'll find a setting "number of days" where you can configure the retention period for the emails.
If left empty, emails won't be deleted.

Regarding the addresses of a user, there is no mechanism to delete them after a certain period of time. This has to happen at the user account level and at the order level.
When you delete a Joomla user account, HikaShop will automatically delete its associated addresses.
Similarly, when you delete orders in the backend, HikaShop will automatically delete its billing and shipping addresses.

For the Joomla user accounts, you can use a task plugin like this:
extensions.joomla.org/extension/manage-inactive-users-task/

And if you need to automate the deletion of old orders, you can create a mass action for that in the System>Mass actions menu:
- with the trigger "every hour"
- with a filter on the "order_created" column being lower than "{time}-xxx" where xxx is the number of seconds you wish to keep an order on your website.
- with a limitation of 100 instead of the default 500, in order to not delete too many orders at once
- with an action "delete elements"

Note that it won't necessarily be the oldest orders that will be deleted first unless you also add a filter "order column" with the value "order_created" and a filter "order direction" with the value ascending to your massaction.

You can read more about mass actions here:
www.hikashop.com/support/documentation/167-massaction-form.html