Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Tyslo EasySell is a one page checkout and order form solution with upsells, embedded on merchant ecommerce stores to streamline purchases and raise average order value.
Tyslo EasySell is a one page checkout and order form solution built by Tyslo and embedded directly on merchant ecommerce stores, most commonly on the Shopify platform. It replaces the standard checkout with a streamlined order form and adds upsells, order bumps and downsells to raise the average order value.
Because EasySell sits on the conversion path, it processes customer order data and can run analytics and marketing features that fall within the scope of European data protection law.
To complete an order, EasySell processes identity and contact data such as name, email, phone number, shipping address and the contents of the cart. It relies on functional cookies to keep the session and the order form state, and it may set analytics cookies to measure form performance and conversion.
Where merchants connect marketing pixels or order verification by SMS or messaging apps, additional identifiers and metadata may be collected and shared with those third parties.
Order processing through EasySell is regulated by the GDPR, while the storing and reading of cookies on the visitor device falls under the ePrivacy Directive as implemented in national law. Strictly necessary cookies that enable the order form can be set without consent, but analytics and marketing cookies require prior consent.
The merchant is the data controller and Tyslo acts as a processor, so a data processing agreement under Art. 28 GDPR should be in place.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Consent must be requested before any non essential cookie or marketing tag is activated. It has to be freely given, specific, informed and as easy to withdraw as to give, which means a consent banner with a genuine refuse option and no pre ticked boxes.
The processing strictly required to fulfil the order relies on contract performance rather than consent, so the order form itself can operate while optional tracking stays blocked until the visitor agrees.
Because EasySell typically runs on Shopify, some data may be processed on infrastructure located in the United States. Such transfers should be covered by the EU US Data Privacy Framework where the recipient is certified, or by Standard Contractual Clauses together with a transfer impact assessment.
Map every cookie and tag that EasySell and connected tools place, then gate the non essential ones behind a consent management platform. Sign a processing agreement with Tyslo, document the lawful basis for each purpose, and update your privacy and cookie notices to name EasySell and any marketing integrations.
Finally, test that refusing consent truly blocks analytics and marketing cookies, and keep records of consent so you can demonstrate accountability to supervisory authorities.
Websites using Tyslo EasySell must obtain user consent under GDPR regulations.
DPIA considerations
A full DPIA is generally not mandatory for EasySell, since the processing involves standard order data rather than large scale or sensitive profiling. A documented risk assessment remains advisable because checkout data includes names, addresses and contact details, and because optional analytics and marketing features may broaden the scope of processing.
Sample consent text
We use EasySell to power our order form and to offer relevant product suggestions. With your consent, we set analytics and marketing cookies to measure performance and improve our offers. You can accept, refuse or adjust your choices at any time.
Third-party domains contacted
tyslo.comeasysellapp.comcdn.shopify.commyshopify.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| easysell_session | Functional | Session | Maintains the order form session so the visitor can complete a purchase. |
| easysell_cart | Functional | 7 days | Stores the cart and selected upsell offers between page views. |
| easysell_form_state | Functional | 1 day | Remembers entered order form fields to prevent data loss on reload. |
| _easysell_stat | Analytics | 13 months | Measures form views and conversion to evaluate checkout performance. |
| easysell_variant | Analytics | 30 days | Keeps the assigned variant for A B testing of order form layouts. |
Tyslo EasySell uses cookies for user preferences — inform visitors with a consent banner.
EasySell sets functional cookies that keep the session and the state of the order form so a purchase can be completed. Depending on configuration it may also set analytics cookies to measure conversion, and connected marketing pixels can add their own identifiers.
Consent is required for any analytics or marketing cookies that EasySell or its integrations place. Strictly necessary cookies that run the order form do not require consent, but they should still be disclosed in your cookie notice.
Order processing relies on the performance of a contract under Art. 6(1)(b) GDPR, since the data is needed to fulfil the purchase. Optional analytics and marketing rely on consent under Art. 6(1)(a) GDPR.
Because EasySell usually runs on the Shopify platform, some processing may take place on infrastructure in the United States. Such transfers should rely on the EU US Data Privacy Framework or on Standard Contractual Clauses with a transfer impact assessment.
A full DPIA is usually not mandatory because EasySell processes ordinary order data rather than large scale or sensitive profiling. A documented risk assessment is still recommended, especially where marketing tracking is enabled.
Route all non essential cookies through a consent management platform, sign an Art. 28 processing agreement with Tyslo, and keep the order form on a contractual basis. Update your privacy and cookie notices to name EasySell and verify that refusal blocks optional tracking.
Alternatives include native Shopify checkout, other order form and upsell apps, and European order management tools. When comparing them, weigh their cookie footprint, their hosting region and the transparency of their data processing terms.
List the functional and analytics cookies EasySell sets, with their purpose and duration, and add any marketing pixels you connect. State the lawful basis for each category and explain how visitors can change or withdraw consent.