HDWebmobile Data Privacy Requests
Let customers request their own data be exported or erased from My Account, via WordPress’s own core privacy-request system.
Overview
HDWebmobile Data Privacy Requests adds “Request data export” and “Request account erasure” buttons to a logged-in customer’s My Account dashboard. Every request is filed through WordPress’s own core personal-data request system — this plugin does not reimplement export or erasure itself.
Several competing GDPR/data-request plugins for WooCommerce accepted an email address directly from the request body when a logged-in customer submitted a data export or erasure request, and used that submitted email — rather than the requester’s own account email — to create the underlying privacy request (CWE-863, Incorrect Authorization). A logged-in customer could submit someone else’s email address and initiate an export or erasure request against a stranger’s data. This plugin never has an email field to submit in the first place: the one method that ever files a request takes a WordPress user id as its first parameter — never an email address — and always derives the email from that user’s own account record. The only caller always passes the currently logged-in user’s own id; there is no admin-post handler reachable by a guest, since this plugin only ever acts on the account that is already authenticated. Every request still goes through WordPress core’s own confirmation-email flow, so even a compromised session can’t silently complete an export or erasure without that email being seen.
Key Features
- “Request data export” and “Request account erasure” buttons on My Account
- A list of the customer’s own past requests and their status
- Reuses WordPress’s own core Export/Erase Personal Data admin screens — nothing new for the store owner to learn
Limitations
Please read before installing:
- Logged-in customers only — guests should use WordPress’s own default admin-initiated privacy request tools
- Does not change what data WooCommerce exports/erases — that’s still governed by WooCommerce’s and WordPress’s own core exporters/erasers
Quick Setup
- Upload the plugin files to the /wp-content/plugins/hdwebmobile-data-privacy-requests directory, or install through the Plugins screen directly.
- Activate the plugin through the ‘Plugins’ screen in WordPress. WooCommerce must already be installed and active.
- Customers will see the new buttons on their My Account dashboard immediately.
Latest Version
Current stable version in readme: 1.0.0 (Initial release: My Account data export/erasure requests, always scoped to the requester’s own account, filed through WordPress’s own core privacy-request system.)
See our other WordPress plugins for more WooCommerce and site-utility tools.