Download GDPR Data Export

Returns an ad-hoc data dump (not bound to a GDPR request) of everything stored for the customer.

Overview

See the GDPR Requests overview for the full feature flow.

All admin endpoints require an admin Bearer token — see Authentication.

Endpoint	Method
/api/admin/customers/{customerId}/gdpr-download-data	POST

Response fields

Field	Type	Notes
customerId	integer	The exported customer.
customerEmail	string
generatedAt	string	When the export was produced.
data.customer	object	Profile fields. password and remember_token are never included.
data.addresses	array	The customer's saved addresses.
data.orders	array	Orders (with items, addresses, payment).
data.reviews	array	Product reviews authored by the customer.
data.wishlist	array	Wishlist entries.
data.notes	array	Admin notes recorded on the customer.

Full GDPR export

This covers addresses, orders, reviews, wishlist, and notes. A sub-section that has no rows returns an empty array.

Permission: customers.gdpr_requests.view.