FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

GoodEshop

PreferencesOfficial website

Hosted ecommerce store builder that lets merchants create and run an online shop, with cart and session cookies plus optional analytics and marketing tools.

Block GoodEshop until consentScan my site
Overview

What does GoodEshop do?

What GoodEshop Is

GoodEshop is a hosted ecommerce store builder that lets merchants create and operate an online shop without managing their own infrastructure. It provides storefront templates, product catalogs, a shopping cart and checkout, and usually integrates with payment and shipping providers. Like any online store, it relies on cookies to keep a cart and session working across pages.

Data and Cookies

The core of the platform uses strictly necessary cookies for the cart, session and security, which keep the shop working and do not generally require consent. On top of that, a merchant can enable optional analytics, advertising and personalization tools that set their own cookies and process visitor data. Order and account data such as names, addresses and payment references are processed to fulfil purchases.

GDPR and ePrivacy

Running a shop with GoodEshop involves processing personal data of customers, so the merchant is a controller and the platform is typically a processor. Strictly necessary cookies are exempt from consent under ePrivacy, but optional analytics and marketing cookies are not. The merchant must provide clear privacy and cookie information and respect data subject rights.

Consent

You do not need consent for the cart, checkout and security cookies that make the store function. You do need prior consent for any analytics, advertising or personalization cookies you switch on, collected through a banner before those tags fire. Make sure optional tools stay disabled until the visitor opts in.

Transfers to Third Countries

Where customer and order data is processed depends on where GoodEshop hosts the store and which integrations are active. If hosting or any analytics, payment or marketing partner is outside the EEA, the data may be transferred to a third country and needs a valid transfer mechanism. Confirm the hosting region and add Standard Contractual Clauses where required.

Compliance Steps

Sign a data processing agreement with GoodEshop, confirm the hosting region and list every optional tracker you enable. Use a consent banner for non essential cookies, publish accurate cookie and privacy notices, and provide a way to exercise data subject rights. Review integrations periodically so your disclosures match what the store actually does.

Compliance

GoodEshop and the GDPR

GoodEshop is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Contract and legitimate interest for strictly necessary shop functions, and consent for optional analytics and marketing cookies
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, plus Standard Contractual Clauses where data leaves the EEA

Impact assessment (DPIA)

A full DPIA is usually not required for the core shop functions, which rely on strictly necessary cart and session cookies. A DPIA becomes relevant if a merchant enables extensive analytics, profiling or marketing integrations, or processes special category data. Assess which optional trackers are active, where customer and order data are hosted, and whether any transfers leave the EEA.

Sample text for your banner

We use necessary cookies to run your cart and checkout. With your permission we also use analytics and marketing cookies to improve our store and show relevant offers. Do you accept these optional cookies?
Cookies and trackers

What GoodEshop sets and contacts

Tracking method
Hosted ecommerce store builder that serves storefront pages and uses session and cart cookies for shopping functionality, plus optional analytics and marketing tags that a merchant may enable
Server location
Provider hosted, server location depends on the GoodEshop deployment and the merchant should confirm it in the data processing agreement
Data transferred outside the EU
Depending on hosting and on any analytics, payment or marketing integrations enabled, customer data may be processed outside the EEA, the merchant should confirm the regions and put transfer safeguards in place

Cookies set (6)

NameTypeDurationPurpose
ge_sessionFunctionalSessionMaintains the visitor session so the store can keep the user signed in and consistent across pages
ge_cartFunctional7 daysStores the contents of the shopping cart so items remain available during the visit
ge_csrfFunctionalSessionProvides a security token to protect forms and checkout against cross site request forgery
ge_consentFunctional1 yearRemembers the cookie consent choices made by the visitor
_gaAnalytics2 yearsOptional analytics cookie that distinguishes visitors when a merchant enables web analytics
ge_mktTargeting90 daysOptional marketing cookie used for remarketing when a merchant enables advertising integrations

Third-party domains contacted (6)

  • goodeshop.com
  • cdn.goodeshop.com
  • assets.goodeshop.com
  • checkout.goodeshop.com
  • www.google-analytics.com
  • fonts.gstatic.com
Questions

Frequently asked questions about GoodEshop

Can't find your question? Write to us, we answer fast.

What cookies does GoodEshop set?

GoodEshop sets strictly necessary cookies for the session, cart and security so the shop works, and a consent cookie to remember choices. If a merchant enables analytics or marketing tools, those add optional cookies such as an analytics identifier or a remarketing cookie. The exact list depends on which features and integrations the merchant turns on.

Is consent required for GoodEshop?

Consent is not required for the strictly necessary cart, session and security cookies that make the store function. Consent is required before any optional analytics, advertising or personalization cookies are set. You should present a banner that keeps optional cookies off until the visitor agrees.

What is the legal basis for GoodEshop?

Necessary shop functions rely on contract performance and legitimate interest, since they are needed to deliver the store and process orders. Optional analytics and marketing cookies rely on consent under the ePrivacy rules and the GDPR. Document which basis applies to each category of processing.

Does GoodEshop transfer data to third countries?

It depends on where GoodEshop hosts the store and which integrations are active. If the hosting region or an analytics, payment or marketing partner sits outside the EEA, customer data may be transferred to a third country. Confirm the hosting region with the provider and put Standard Contractual Clauses in place where needed.

Do we need a DPIA for GoodEshop?

A DPIA is usually not required for the core shop functions, which use strictly necessary cookies and standard order processing. It becomes relevant if you enable extensive profiling, marketing or analytics, or process special category data. Assess the optional trackers you activate and any transfers outside the EEA.

How do we run a GoodEshop store compliantly?

Sign a data processing agreement, confirm where data is hosted, and keep optional trackers disabled until the visitor consents. Publish clear cookie and privacy notices that list the cookies actually in use and provide a way to exercise data subject rights. Review enabled integrations periodically so your disclosures stay accurate.

What are the alternatives to GoodEshop?

Alternatives include other hosted store builders and self hosted open source ecommerce platforms that give more control over hosting location and trackers. EU hosted options can simplify transfer questions. The right choice depends on your technical capacity and your data protection requirements.

How do we keep our cookie policy up to date for GoodEshop?

Review the cookies your store actually sets whenever you enable or disable an integration or change theme. Update your cookie policy and consent banner to reflect new cookies, durations and purposes. Keep a record of the optional tools you have switched on so the disclosures remain accurate.

Same category

More services: E-commerce

See the whole category

Eatself

Eatself is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Eatself enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Eatself empowers marketing teams to achieve measurable growth.

Preferences

Mixin

Mixin is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Mixin supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Mixin ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

SendOwl

SendOwl is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. SendOwl supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, SendOwl ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Convious

Convious is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Convious provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Convious helps deliver the right message to the right audience at the right time.

Marketing

HelixPay

HelixPay is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. HelixPay enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, HelixPay empowers marketing teams to achieve measurable growth.

Preferences

Shoptet

Shoptet is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Shoptet supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Shoptet ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site