Data protection policy for Amazon orders
Overview
As a third-party Amazon developer, Cin7 Omni must comply with Amazon's Data Protection Policy that specifies how Personally Identifiable Information (PII) is retained. In the context of Cin7 Omni, PII includes the following data:
Contact
First Name
Last Name
Delivery/Billing Address Line 1
Delivery/Billing Address Line 2
Email address
Phone number
Amazon's Data Protection Policy requires that PII is only kept for the purposes of fulfilling an order and that any PII after 30 days of fulfillment is deleted.
Amazon Sellers are bound by similar policies in the Seller Central Selling Policies and Seller Code of Conduct.
What does this mean for my data in Cin7 Omni?
Cin7 Omni has implemented the following:
No CRM record will be created for Amazon orders. Instead, orders will be assigned to a generic CRM record, or a record of your choosing.
When an Amazon order has been fully dispatched, and 30 days have passed after the date of dispatch, Cin7 Omni will remove PII in the order details and replace it with "[Redacted]".
For existing customers, Cin7 Omni will modify retrospectively any orders that contain PII.
What does this look like?
When an order is first downloaded, it is assigned to a generic CRM record. This can be modified to another generic customer record in the Amazon module settings if necessary.
While logged in as an Administrator, select the Settings icon at the bottom left.
Under the Integrations panel, select the Amazon integration.
Select Settings.
Under Customers, change Create or Assign Customers to Orders to '"Assign to selected Customer" and then select a customer.
All Amazon orders will be assigned to this contact.
PII will still appear in the order details, however, so that you can fulfil this order. Once you have marked this order as dispatched, and 30 days have passed, the PII information from the order will appear like this:
Orders are checked daily for PII information and removed when found (30 days or older).
When does this take effect?
This change was initiated September 4, 2019, and implemented the PII redaction 30 days after order fulfillment from that point forward.