# Limiting order and customer data exports at an e-commerce agency

Give export rights only to staff who need them. Shopify and BigCommerce can turn off exports while staff keep order access. Set rules for the files.

Updated: October 16, 2026

An order export is a CSV file, a spreadsheet with a row for each item ordered. Shopify's list of export fields includes the billing and shipping name, address and phone number. Looking at one order on screen is different. An export moves many buyers' details onto a staff member's computer in one click. At an e-commerce agency, limiting exports takes three things together: fewer people who can export, rules for the files, and a record you can check.

The file rules in the last section also apply to Amazon and other marketplaces. How to get staff into a store in the first place is in [getting agency staff into a client's Shopify or BigCommerce store](/guides/agency-accounts/shopify-bigcommerce-staff-permissions).

## Turning off exports in Shopify

Shopify lists View and Export as separate permissions under Orders, and Customers and Draft orders each have their own Export. So a person who ships orders can have View plus Fulfill and ship, without Export.

Selecting the top item of a category selects every permission inside it, and any permissions it depends on in other categories. If you select Orders at the top, Export comes along with it, so select each item one at a time.

Permissions apply to the whole store. Shopify Help says you can't limit them to individual orders, products or customers. It names two exceptions: permissions for specific apps or sales channels, and a business-to-business setting that limits a user to assigned company locations.

How the file arrives depends on its size. Export 50 orders or fewer, or the current page, and the file downloads straight to the device. Export more, or export by date, and Shopify emails the file to the person who ran it and to the store owner. If the owner's address belongs to the client, the client sees every large export.

For records, the store activity log's examples don't include exports, and Shopify Help doesn't say whether exports are logged. The log shows at most 250 results and can't be exported.

## Turning off exports in BigCommerce

BigCommerce also keeps exports apart from day-to-day order work. Its permissions table lists Export Orders and Export Customers as their own permissions. Manage Orders gives access to viewing and searching orders and shipments, and to actions like printing invoices and packing slips. A person who ships orders can have Manage Orders with Export Orders left off.

Export Customers needs Manage Customers turned on first, so it doesn't come by itself. Manage Customers doesn't require Export Customers, so a person can look up buyers without exporting them.

Apps are a second route. BigCommerce opens marketplace apps to each user under Single Click Apps. If an installed app can export orders, giving a user that app gives them that export too. The high-risk Launch applications permission opens every installed app at once. Check each user's app list along with their permissions.

BigCommerce's Staff Action Log records each control panel change with the user and time, but its examples don't include exports, and the help article doesn't say whether they're logged.

| | Shopify | BigCommerce |
| --- | --- | --- |
| Turn off only exports | Leave Export unchecked under Orders, Customers and Draft orders | Leave Export Orders and Export Customers off |
| Large exports | More than 50 orders or by date: emailed to the person and the store owner | Not described in the permissions article |
| Export appears in a log | Not stated in Shopify Help | Not stated (Staff Action Log examples don't include exports) |

## Where California law comes in

If your client is a "business" under the California Consumer Privacy Act (CCPA) and gives your agency its buyers' data, its contract with you has to cover that data. A "business" here is a for-profit company doing business in California that meets a size or data threshold (1798.140(d)). Cal. Civ. Code 1798.100(d) requires the contract to limit the data to specified purposes. It must also give the client the right to take reasonable steps to check how you use it. Section 1798.100(e) separately requires the business to keep reasonable security for the personal information it collects. An agency that can say who can export and where the files go can answer the client's checks under 1798.100(d)(3) and show the security that subsection (e) asks for.

Consumers can also sue over some breaches. Section 1798.150 lets a consumer recover $107 to $799 per consumer per incident (the statute's $100 to $750, adjusted for inflation), or actual damages if higher. It applies when certain unencrypted and unredacted data is stolen or exposed because a business failed to keep reasonable security. That data is narrower than an order export. It covers a name combined with certain other items (1798.81.5(d)(1)(A)). Those include a Social Security number, a driver's license or other ID number, a card number with its security code, and medical or health insurance details. An email address with a password or security answer that opens the account is covered too. Names, addresses and phone numbers alone aren't on the list. Check what your client's export columns actually include before you assume either way.

## Rules for what permissions can't stop

If store permissions can't take exports away, agree on the rest with the client.

1. Who may export, and why. Name the people and the tasks that need an export, such as shipping or sales totals. Without that list, you can't tell whose permission to remove.
2. Where files may be kept. Limit them to a set folder on company-managed computers, and rule out personal email and personal devices. To send a file to the client, put it in a shared folder the client controls instead of attaching it to an email.
3. When files are deleted. Delete each file when the task ends, and write down that you did.
4. A log of exports. If the store doesn't record exports, log who exported, when, which range, for what, and when the file was deleted. This is what you show a client who asks. It relies on staff reporting their own exports, so a missed entry won't show up anywhere in the store.


## Frequently asked questions

**Can we stop some staff from exporting orders?**

Yes. In Shopify, leave Export unchecked under Orders and Customers, and they can still view and fulfill orders. In BigCommerce, leave Export Orders and Export Customers off.

**Will the client notice when we export orders?**

In Shopify, an export of more than 50 orders, or one by date, is emailed to the person who ran it and to the store owner. If the owner's email is the client's, the client gets a copy.

**Can staff keep exported files on a home computer?**

That's for you and the client to agree. Set where files may be kept and when they're deleted, and keep a record of both.

**Do Shopify or BigCommerce record who exported data?**

Neither help center says exports are logged. Shopify's activity log and BigCommerce's Staff Action Log list other examples, so keep your own log of who exported what and when.

**Does California's breach lawsuit rule cover a lost order file?**

Usually not by itself. Section 1798.150 covers names with items such as Social Security, ID or card numbers with a code. Names, addresses and phone numbers alone aren't on that list.

## Sources

- [Shopify Help Center: Store permissions](https://help.shopify.com/en/manual/your-account/users/roles/permissions/store-permissions)
- [Shopify Help Center: Exporting orders](https://help.shopify.com/en/manual/fulfillment/managing-orders/exporting-orders)
- [Shopify Help Center: Shopify admin activity logs](https://help.shopify.com/en/manual/shopify-admin/activity-logs)
- [BigCommerce Help Center: User Roles and Permissions](https://support.bigcommerce.com/s/article/User-Permissions?language=en_US)
- [BigCommerce Help Center: Using Store Logs](https://support.bigcommerce.com/s/article/Using-Store-Logs?language=en_US)
- [California Civil Code 1798.100 (California Consumer Privacy Act)](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.100)
- [California Civil Code 1798.140 (definitions, including "business")](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.140)
- [California Civil Code 1798.150 (personal information security breaches)](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.150)
- [California Civil Code 1798.81.5 (reasonable security; definition of personal information)](https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=CIV&sectionNum=1798.81.5)
- [California Privacy Protection Agency: Updated Monetary Thresholds in CCPA](https://cppa.ca.gov/regulations/cpi_adjustment.html)

## How Junify handles this

**Doing this by hand** You agree with each client on how access is handed over, add and remove people platform by platform whenever staff change, and keep track of which staff member used which client's account.

**With Junify** Store permissions don't cover every route, such as an app that exports orders. Where staff open a store through a login in Junify, your admin can block downloads to the computer for that account, so no export file lands on their laptop. Shopify emails large exports, so keep Export off as well. Junify detects uploads and alerts the admin. If staff know the password today, change it with the client at setup so only Junify holds it.

Junify is an access management service for handing work in your web accounts to employees, contractors and outside teams without giving them the password. Each person verifies on their own phone and clicks a card to sign in. The password is never shown, and Junify records who used which account and when.

- [Try the demo](https://www.junify.com/bpo/try?lang=en&scenario=marketing-ops&from=guide&cluster=agency-accounts&slug=ec-order-data-download-control)
- [Book a 30-minute demo](https://www.junify.com/bpo/demo)

## More on this topic

- [Account clauses an agency should propose in its client contract](/guides/agency-accounts/account-clauses-for-service-providers): Propose five: account handover, who may use accounts, records, incident notice, and offboarding. Keep your own promises apart from what the client must do.
- [How to write client account handling into your agency's security policy](/guides/agency-accounts/agency-security-policy-for-clients): Write a short public policy, an internal policy for staff, and an access summary for each client. Rewrite template rules for logins the client owns.
- [Amazon Seller Central user permissions, and how to give an agency access](/guides/agency-accounts/amazon-seller-central-user-permissions): Seller Central Help says not to share logins. On a Professional plan, the seller invites staff as employees and authorizes your agency as a Service Provider.