FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
E-commerce

PrestaShop

PreferencesOfficial website

PrestaShop is a French open source e commerce platform used by SMEs and large brands across Europe. It runs PHP and MySQL, with cloud and self hosted options.

Block PrestaShop until consentScan my site
Overview

What does PrestaShop do?

What PrestaShop is

PrestaShop is an open source PHP and MySQL e commerce platform developed by PrestaShop SA, a French company based in Paris. It powers over 250,000 online stores in Europe, with a strong presence in France, Spain, Italy and Poland. It can be self hosted on any LAMP stack or run on the official PrestaShop Cloud (AWS EU).

Data and cookies set

By default PrestaShop sets the PrestaShop-* first party cookies for the session and the shopping cart, plus a CSRF token. These cookies are strictly necessary. Additional cookies are added when marketing or analytics modules are enabled.

GDPR and ePrivacy implications

Order and account data are processed under Article 6(1)(b) GDPR. Marketing modules, advertising tags and analytics require valid consent under Article 5(3) ePrivacy and Article 6(1)(a) GDPR.

Consent requirements

You do not need consent for the strictly necessary checkout cookies. PrestaShop ships an official GDPR module that helps with data subject requests. Marketing, analytics and advertising modules must be gated behind a consent management platform.

Data transfers outside the EEA

If you self host in the EU there is no transfer. PrestaShop Cloud uses AWS EU. Third party modules (Mailchimp, Klaviyo, Hubspot, Google Tag Manager) may introduce US transfers that require SCCs and a transfer impact assessment.

Practical compliance steps

Host PrestaShop on EU infrastructure, enable the official GDPR module, integrate a CMP (Axeptio, Cookiebot, Klaro), block marketing modules before consent, document each third party module and its sub processors, and audit the cookie inventory monthly.

Compliance

PrestaShop and the GDPR

PrestaShop is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Performance of a contract (Article 6(1)(b) GDPR) for order processing, consent (Article 6(1)(a) GDPR and Article 5(3) ePrivacy) for marketing and analytics modules added on top
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive 2002/58/EC, French CNIL guidelines, German TDDDG, Spanish LSSI, PCI DSS

Impact assessment (DPIA)

The platform itself rarely triggers a DPIA. A DPIA can be needed for advanced modules (advertising, customer segmentation, loyalty profiling) and for third party integrations such as US payment or marketing tools.

Sample text for your banner

Our online store runs on PrestaShop, an open source platform developed by PrestaShop SA in France. Order and account data are processed to fulfil your purchase. Marketing and analytics cookies are activated only with your prior consent.
Cookies and trackers

What PrestaShop sets and contacts

Tracking method
server_side
Server location
Self hosted (operator choice) or PrestaShop Cloud on AWS EU

Cookies set (2)

NameTypeDurationPurpose
PrestaShop-{hash}first_party20 daysSession and cart identifier (strictly necessary).
checksumfirst_partySessionVerifies the integrity of the visitor session.

Third-party domains contacted (2)

  • prestashop.com
  • addons.prestashop.com
Questions

Frequently asked questions about PrestaShop

Can't find your question? Write to us, we answer fast.

Which cookies does PrestaShop set?

PrestaShop sets first party cookies starting with PrestaShop- for the session and cart, plus a CSRF token. These are strictly necessary. Marketing and analytics modules add their own cookies.

Do I need consent?

Not for the strictly necessary cookies. Yes for analytics, advertising and marketing modules.

What is the legal basis?

Article 6(1)(b) GDPR for orders, Article 6(1)(a) GDPR and Article 5(3) ePrivacy for marketing and analytics modules.

Are any data transferred to the United States?

No when self hosted in the EU. Yes if you enable third party modules like Mailchimp, Klaviyo or Google Tag Manager that route data through US infrastructure.

Is a DPIA needed?

Usually limited. Run a DPIA when you enable behavioural profiling, loyalty scoring or advanced analytics modules.

How do I implement compliance correctly?

Host PrestaShop in the EU, enable the official GDPR module, integrate a CMP, disable marketing modules until consent is given and audit your installed modules.

What are the alternatives?

Magento (Adobe Commerce), WooCommerce, Shopify, BigCommerce, Sylius. EU based and self hosted options minimise transfer issues.

How do I update the cookie policy?

Run a scanner on staging and production each release, separate strictly necessary cookies from consent based ones and document the third party modules in your policy.

Related guide

Our guides on PrestaShop

PrestaShop cookies and GDPR: compliance guide

How to make your PrestaShop store GDPR-compliant for cookies: cookie audit, compliant banner, Google Consent Mode v2, and a practical checklist.

Read the guide
Same category

More services: E-commerce

See the whole category

Tauros Media

Tauros Media is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Tauros Media supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Tauros Media ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Little Hotelier

Little Hotelier is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Little Hotelier enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Little Hotelier empowers marketing teams to achieve measurable growth.

Preferences

Shopaholic

Shopaholic is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Shopaholic supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Shopaholic ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

iRaiser

iRaiser is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. iRaiser integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, iRaiser helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

AdNabu

AdNabu is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. AdNabu supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, AdNabu ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Simple Goods

Simple Goods is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Simple Goods integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Simple Goods helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site