[kolinko]

always cc the local GDPR office when reporting such things

[fuzzy2]

They won't do anything. Had this exact scenario with two Shopify-based sites where my address somehow ended up with the second shop. Reported it, shop 1 investigated themselves and found themselves to be innocent, case closed.

[firtoz]

Shopify shares these I think, no?

[deaux]

They'll just be incorporated in Ireland who are more than happy to be a haven for such criminals.

[paulryanrogers]

Where can I read more about this?