RE: Retailers storing data 04-25-2024, 01:40 PM
#4
(04-24-2024, 02:01 PM)llllllllIllIl Wrote: This is being discussed in another thread, but it's important so needs its own post really
When dealing with the same store multiple times it's important to change details so that your accounts can't be linked. Does anyone know which details are stored, and for how long, for specific stores?
There are laws in place which protect customer data and give you the "right to be forgotten". Has anyone tried using data protection laws to ask a company to remove all the information they hold about you, then placed a new order? Presumably if they have deleted your details, they wouldn't be able to link the new account. What are your thoughts on this tactic?
Share knowledge/experiences below
It's difficult. By my guess, you're based in the UK since you're stating the "right to be forgotten". In my opinion, it is difficult to create a separate identity to avoid repeated information. For me, the billing address tends to be the hardest step because you usually need a corresponding ID for this when opening a bank account (even virtual). I also asked the same question a few days ago, but the following information needs to be fresh (and ideally fake) to hit a store multiple times:
Delivery address (not too close to your previous attempts),
Billing address,
Recipient name,
Billing name,
Email,
Phone number,
IP address,
Device,
and probably a few others which I cannot think of right now.
I am unsure if retailers genuinely delete your previous details, especially if you have had trouble with the retailer during an SE attempt, for example suspected fraud.
Regarding which details and long they might store your details is unknown, all retailers are different with different refund and data policies. The place I work at has order details spanning all the way back to 2014 (yes 10 years ago) including billing address, billing name, recipient's name, items ordered etc - and this is with a small company, let alone a large retailer with significantly higher order values. This makes sense because some items offer 3+ year warranties which require proof of purchase and the retailer may hold onto these details because of this, and potentially for fraud protection (especially after Covid) because they know it's significantly harder to get hit when a social engineer must generate new details.
I suppose in this day and age, it is becoming more prevalent for consumers to reject "cookies" which makes it seem more likely a retailer would remove your old details because they have no genuine reason to store your data any longer after a failed order (unbeknownst of the SE)
If you do try it out, please keep us updated, I am intrigued to see if this is the easiest way around data collection. But it's probably easier and safer if you go to a new retailer who you haven't hit before.


![[+]](https://sinister.li/images/modern/collapse_collapsed.png)