सुरक्षा, गोपनीयता और अनुपालन
How should I handle customer privacy?
Summary
Merchants should handle customer data carefully and use it only for legitimate business purposes. This includes protecting customer information, following applicable privacy laws, collecting required consent, honoring opt-outs, using connected apps responsibly, and maintaining clear privacy policies.
Who this is for: Merchants who collect customer information through orders, checkout, campaigns, customer support, returns, refunds, and connected apps.
How should I handle customer privacy?
Merchants should treat customer data as sensitive business information. Customer data should be collected, stored, shared, and used only for legitimate business purposes — orders, delivery, payment, customer support, refunds, returns, and approved communication.
What customer data should I protect?
- Name, phone number, and email address
- Shipping and billing address
- Order details and payment status
- Return or refund details
- Customer messages and purchase history
- Location information and marketing preferences
- Analytics or campaign data where connected
Access to customer data should be limited to people who need it.
Can I use customer data for marketing?
Customer data should be used for marketing only when the merchant has the required consent and legal basis. This may apply to WhatsApp campaigns, email campaigns, SMS campaigns, retargeting ads, custom audiences, and promotional messages. Merchants should honor opt-out requests and avoid spam.
What should my Privacy Policy explain?
- What data is collected and why
- How data is used
- Which third-party providers may process data
- How customers can contact the merchant or request changes
- Marketing communication rules
- Cookies, tracking, and analytics tools
- Data retention and security practices
- Legal basis where required
Merchants should consult a legal professional for policy accuracy.
How do connected apps affect privacy?
Connected apps may process customer data depending on their purpose. Payment gateways process payment-related data, logistics providers receive delivery information, WhatsApp providers process customer messages, analytics tools track website behavior, ad platforms may receive event data, and marketplaces may process product, order, or customer data. Merchants should review third-party app policies before connecting them.
Should I limit team access to customer data?
Yes. Customer data access should be limited to team members who need it for valid business purposes — sales, fulfillment, support, or returns teams. A content editor or designer may not need full customer access.
Can AI analyze customer data?
Yes, where customer data is available. AI can help analyze customer behavior, repeat purchases, customer segments, and customer value. AI-powered customer analysis consumes AI credits. Merchants should avoid entering unnecessary sensitive information into AI prompts and should use customer insights responsibly.
Customer privacy is the merchant's responsibility. ShopIQ provides ecommerce workflows, but merchants must use customer data lawfully, respectfully, and securely.