Two Plugins that will make your WordPress website GDPR Compliant pretty fast

Last Updated: August 26, 2021

If you use WordPress as your CMS (content management system) and you have got a contact form, signup form (say for a newsletter) and/or a comment panel (where users can leave a comment on your website) then under GDPR, you need to make sure that:

#1 Your website users can request access to their personal data (name, email address, comments or any other data submitted to your website).

#2 Your website users can download and view their personal data (as per Article 15 of GDPR).

#3 Your website users can request for their personal data to be removed (as per Article 18 of GDPR).

Now in order to create such functionality on your WordPress website, you have got two options:

#1 Hire a WordPress developer to create, test, and maintain such functionality for you.

#2 Use a readymade WordPress plugin.

I prefer the latter.

If you navigate to the ‘contact us’ page of my website, you will see a new option named ‘Request Personal Data’:

request personal data

Once you click on this option, you will be asked to enter your email address:

request personal data2 1

Once you submit your email address, you will automatically get an email notification which contains a link to download and view your personal data:

your data request

Following is the content of this email:

check your personal data

When a user clicks on the ‘Check Your Personal Data’ button, he lands on a page through which he can download all of the personal data he submitted on my website.

This includes blog post comments and any or all form fields (submitted via a contact form):

send delete request

As you can see from the screenshot, the user also has the option to send delete requests for blog post comments and/or form entries.

When a user requests to view his personal data, I as DPO (data protection officer) for OptimizeSmart, get an email notification for a request to view personal data:

new data request

Following is the content of this email:

check list of requests

When I click on the ‘checklist of requests’ button, I can see the list of all data requests made by the users in my WordPress admin panel:

list of data requests

This functionality is really handy for a high traffic website like mine, as I get tens of thousands of people visiting my website every single day and I can’t manually manage or maintain records of data request and/or delete requests (though I haven’t got any such request so far, but just in case).

If I need to check the list of delete requests, I can click on the ‘Delete Requests’ tab:

list of data requests2

Here I get the option to delete personal data or make personal data anonymous:

delete personal data

I also get an email notification, every time a website user send a delete request:

new delete request

Following is the content of this email:

check all requests

If I click on the ‘check all requests’ button, I will be redirected to the page (within WordPress admin panel) which lists all of the delete requests.

The WordPress plugin that I use to generate this functionality is This plugin is free to use but the add-ons they provide to make your contact forms GDPR complaint, require an annual subscription.

I use the Gravity form plugin to host my contact form. So I use their ‘Gravity form add-on’ plugin. It cost around 20 euros a year (around US $24/year)

Through the free version, you can handle all the view and delete requests for the blog posts comments submitted on your website. But in order to handle all the view and delete requests for the personal data submitted via your contact form (where most of the personal data is collected), you would need to purchase your contact form relevant add-on from ‘WP-GDPR’.

‘WP-GDPR’ has got add ons for: Gravity forms, contact form 7 DB, Woocommerce, Flamingo, and MailChimp.

Accept or decline Cookie Tracking

The second plugin that can make your WordPress website GDPR compliant pretty fast is: Surbma – GDPR Proof Cookies

we are using cookies

This plugin helps your website to comply with GDPR cookie regulations by asking every visitors to accept or decline cookie tracking.

If visitor choose to decline, than no visitor data will be sent to third party services.

If visitor accepts tracking, than data will be sent to third parties.

So visitors can choose to be tracked or not, before they visit any page of the website.

The cookie saved by this plugin is not storing any sensitive personal data, it is storing only two fix values: “yes” or “no”.

This cookie management is GDPR proof, as it is impossible to identify any user with the cookie data. Cookies will expire in 30 days by default.


The free version of this plugin is available, but it has got very limited features.

You would be better off using the paid versions (around $15 a year) where you can carry out full customization (like add link to your privacy policy page, GA Tracking Code Customization), full cookie control, and GA IP anonymization.

The plugin author promise to provide support for Facebook pixel, Google Remarketing, Hotjar, etc in the near future.

By the way, I am not paid in any shape or form to promote these two plugins. I just found them useful and that’s why sharing them with you.

Related Articles:

Register for the FREE TRAINING...

"How to use Digital Analytics to generate floods of new Sales and Customers without spending years figuring everything out on your own."

Here’s what we’re going to cover in this training…

#1 Why digital analytics is the key to online business success.

​#2 The number 1 reason why most marketers are not able to scale their advertising and maximize sales.

#3 Why Google and Facebook ads don’t work for most businesses & how to make them work.

#4 ​Why you won’t get any competitive advantage in the marketplace just by knowing Google Analytics.

#5 The number 1 reason why conversion optimization is not working for your business.

#6 How to advertise on any marketing platform for FREE with an unlimited budget.

​#7 How to learn and master digital analytics and conversion optimization in record time.


My best selling books on Digital Analytics and Conversion Optimization

Maths and Stats for Web Analytics and Conversion Optimization
This expert guide will teach you how to leverage the knowledge of maths and statistics in order to accurately interpret data and take actions, which can quickly improve the bottom-line of your online business.

Master the Essentials of Email Marketing Analytics
This book focuses solely on the ‘analytics’ that power your email marketing optimization program and will help you dramatically reduce your cost per acquisition and increase marketing ROI by tracking the performance of the various KPIs and metrics used for email marketing.

Attribution Modelling in Google Analytics and BeyondSECOND EDITION OUT NOW!
Attribution modelling is the process of determining the most effective marketing channels for investment. This book has been written to help you implement attribution modelling. It will teach you how to leverage the knowledge of attribution modelling in order to allocate marketing budget and understand buying behaviour.

Attribution Modelling in Google Ads and Facebook
This book has been written to help you implement attribution modelling in Google Ads (Google AdWords) and Facebook. It will teach you, how to leverage the knowledge of attribution modelling in order to understand the customer purchasing journey and determine the most effective marketing channels for investment.

About the Author

Himanshu Sharma

  • Founder,
  • Over 15 years of experience in digital analytics and marketing
  • Author of four best-selling books on digital analytics and conversion optimization
  • Nominated for Digital Analytics Association Awards for Excellence
  • Runs one of the most popular blogs in the world on digital analytics
  • Consultant to countless small and big businesses over the decade

Get My Step-By-Step Blueprint For Finding The Best KPIs (32 pages ebook)

error: Alert: Content is protected !!