---
title: "Download my data"
method: GET
path: "/gdpr-data"
tags: ["GDPR"]
---

# Download my data

`GET /gdpr-data`

## Request

- Base URL: `http://localhost:8000/api/shop`
- URL: `http://localhost:8000/api/shop/gdpr-data`
- Auth: HTTP bearer
- TypeScript: <https://skmtc.dev/bagisto/apis/bagisto-shop-api/docs/gdpr-data/get.ts> (a function with typed inputs; its response is checked against the schema)

The personal data the store holds about the signed-in customer, as on the storefront GDPR page: profile, saved addresses and orders. Returned as a list of one entry. For the same data as a PDF, call `GET /api/shop/gdpr-data/pdf` with `Accept: application/pdf`. Needs Configuration > General > GDPR enabled.

## Headers

- `X-STOREFRONT-KEY` string, required
- `X-Locale` string
- `X-Channel` string
- `X-Currency` string

## Response `200`

The customer data.

## Other responses

- `400`: GDPR is switched off.
- `401`: Not signed in.

## Changes

- **2026-10-28** `b84d43839844`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/bagisto/apis/bagisto-shop-api/changes/gdpr-data/get.md)

---

[API](https://skmtc.dev/bagisto/apis/bagisto-shop-api.md) - [All operations](https://skmtc.dev/bagisto/apis/bagisto-shop-api/llms.txt) - [OpenAPI document](https://skmtc.dev/bagisto/apis/bagisto-shop-api/revisions/f619df36bf29?raw)