A notice informing visitors about cookie usage and obtaining consent where required.

In Shopify Admin under Settings > Customer Privacy.

A legal agreement outlining data protection responsibilities between Shopify and merchants.

Shopify often acts as a data processor following merchant instructions.

The merchant is generally the controller of customer data.

Yes, if you offer goods or services to individuals in the EEA, UK, or Switzerland.

GDPR is a European privacy regulation governing personal data collection and processing.