GDPR - PII (Personally Identifiable Information) Management and One Stop Order Processing
One Stop Order Processing retrieves Personally Identifiable Information (PII) order information from various websites, including Amazon. This includes the customer's address and delivery details.
Amazon's policy now depicts that this information can only be retained outside of Amazon for up to 30 days after the order has been marked as shipped. This means that One Stop Order Processing must automatically remove customer information from orders 30 days after they have been shipped.
NOTE : Removing the customer information still allows orders to be used for Tax (VAT) returns and these are orders are still used in predictive stock control. The information is also available within Amazon.
If you have a large number of orders PII will removed over time. Each day any orders that need to have PII details removed are collected and the order PII details removed every 10 minutes automatically (when One Stop Order Processing is not performing any other task). This is done in groups of 6000 orders so should not adversely affect your use of One Stop Order Processing.
Before the orders have their PII details removed you can optionally automatically export the information from One Stop Order Processing.
NOTE : If you do this you should follow the relevant website's data protection policies.
This feature is mandatory for Amazon orders, but currently is optional for other website orders (for example, this is not currently a requirement for Ebay). However, you may optionally include other websites orders in this policy.
You can find out more details on our policies on GDPR and PII at the following links:
One Stop Order Processing Privacy and Data Handling Policy (including PII)
One Stop Order Processing Data Breach Response Plan