The Abandoned Cart module includes built-in GDPR compliance controls that determine how and when cart data is captured from your customers. There are three settings that work together: the GDPR checkbox toggle, the checkbox text, and silent capture mode.
GDPR Checkbox
The GDPR Checkbox setting is enabled by default. When active, a consent checkbox appears on the checkout page below the billing fields. The cart tracking script only sends the customer’s email and cart data to your database after the customer checks this box.
If the customer fills in their email but does not check the consent box, no cart data is captured. This ensures you only track customers who have given explicit consent.
Checkbox Text
The Checkbox Text field controls the message displayed next to the consent checkbox. The default text is:
I consent to cart tracking for marketing purposes.
You can change this to anything that fits your store’s privacy policy. For example, you might reference your privacy policy page or explain what kind of emails the customer can expect to receive.
Silent Capture
The Silent Capture setting changes how cart data is collected. When enabled, the GDPR checkbox is hidden from the checkout page and cart data is captured as soon as the customer enters their email address, without requiring them to check a box.
This mode is intended for stores operating in regions where explicit consent for cart tracking is not legally required, or where consent is already covered by your site’s terms of service or cookie policy.
How the Three Settings Interact
The behavior depends on the combination of settings:
- GDPR Checkbox ON + Silent Capture OFF (default) – The consent checkbox is shown. Cart data is only captured when the customer checks the box.
- GDPR Checkbox ON + Silent Capture ON – Silent capture takes priority. The checkbox is hidden and cart data is captured automatically when the email is entered.
- GDPR Checkbox OFF + Silent Capture OFF – No checkbox is shown. Cart data is captured automatically when the email is entered (same behavior as silent capture).
- GDPR Checkbox OFF + Silent Capture ON – No checkbox is shown. Cart data is captured automatically when the email is entered.
Consent and Abandoned Cart Sync
When the GDPR checkbox is shown (enabled and not in silent mode), the consent status is recorded in the database alongside the cart data. During the abandoned cart sync cron, carts without consent are skipped and not synced to Mautic. This means even if a cart record exists in the database, it will not be pushed to Mautic unless the customer gave consent.
Compliance Considerations
The plugin provides the technical tools for consent collection, but it is your responsibility to ensure your configuration complies with the data protection regulations in your region. If you sell to customers in the EU, UK, or other regions with strict data protection laws, you should keep the GDPR checkbox enabled and ensure your privacy policy mentions cart tracking. If you are unsure, consult a legal professional.