PII — Personally Identifiable Information

Any data that can identify a specific individual: name, email address, phone number, IP address, physical address. Under GDPR, even pseudonymised data (replaced with codes) counts as PII if the mapping back to the individual exists anywhere. EOIT stores zero PII by design — customer data stays in Shopify.