Website representations

Who authorized the merchant to make the public affiliation statement?

For: A research-only merchant that describes itself as an authorized reseller, distributor or partner on its own website. — updated 2026-10-01

What relationship would a visitor infer from the logo’s placement?

For: A research-only merchant displaying a laboratory's logo on product pages, a homepage, evidence links or other marketing surfaces. — updated 2026-10-01

Which records support the rating and review count on this page?

For: A research-only merchant responsible for a rating badge, product rating or third-party review summary on its storefront. — updated 2026-10-01

Does the policy still describe vendors or features that are no longer present?

For: A research-only merchant whose policy still names vendors or features after a store, hosting or service change. — updated 2026-10-01

Who will update a time-limited approval or certificate claim when its evidence changes?

For: A research-only merchant maintaining public approval, certification or other credential claims supported by records whose validity can change. — updated 2026-10-01

How do I separate two buyers whose profiles were already merged without misdirecting more messages or rewriting order ownership?

For: An authorized store administrator at a research-only merchant who has discovered that two different buyers' records were combined into a single customer profile. — updated 2026-10-01

Which systems actually hold this person's information, and is the store export enough to answer the request?

For: An authorized staff member at a research-only merchant assembling the records for one person's customer information request. — updated 2026-10-01

How much verification does this request actually need before we disclose personal records?

For: An authorized staff member at a research-only merchant who must decide how much identity confidence is needed before disclosing a customer's records. — updated 2026-10-01

Which completed privacy actions would a restore silently reverse, and what must be reconciled before restored records are used again?

For: An authorized owner or maintainer at a research-only merchant preparing to restore an older backup after privacy actions were completed on the live store. — updated 2026-10-01

Should real customer records go into the staging copy at all, and if some must, what exactly is authorized?

For: An authorized owner at a research-only merchant whose developer or agency has asked for production data to build or test a staging environment. — updated 2026-10-01

Where did the customer identifier in our analytics report come from, and who corrects it?

For: An authorized staff member or store owner at a research-only merchant who has found customer identifiers inside analytics reports, page URLs or event fields. — updated 2026-10-01

What does our session-replay tool record, and how do we verify exclusions before trusting them?

For: An authorized owner or technical lead at a research-only store reviewing what an installed session-replay tool records on checkout, account and form pages. — updated 2026-10-01

What may we send the developer to diagnose the fault, and what stays out of the package?

For: An authorized store owner or operations lead at a research-only merchant whose developer or agency has requested a full diagnostic export to investigate a fault. — updated 2026-10-01

What do we record and do first when a customer record went to the wrong recipient?

For: An authorized staff member or incident owner at a research-only merchant responding to a customer record that was sent to the wrong recipient. — updated 2026-10-01

Which attachments may be deleted now that the case is closed, and which need restricted retention?

For: An authorized support lead or owner at a research-only merchant deciding what happens to customer attachments after the cases they arrived with are closed. — updated 2026-10-01

Can I still send an order update to a customer who unsubscribed from our emails?

For: An authorized staff member at a research-only merchant who must send a real order update to a customer whose marketing subscription is suppressed. — updated 2026-10-01

Which records on an imported list can enter our campaigns when we cannot prove how the addresses were collected?

For: An owner or authorized marketing lead at a research-only merchant who inherited, purchased, or migrated a mailing list whose permission history cannot be established from its records. — updated 2026-10-01

What must be established before a customer conversation is pasted into an AI tool?

For: A support lead or owner at a research-only merchant whose staff want to use an external AI tool to draft, summarize, or translate customer conversations. — updated 2026-10-01

What do I do with a real review that publishes someone else's private information?

For: An owner or review moderator at a research-only merchant who has found a genuine published review that includes another person's private details. — updated 2026-10-01

How do I find out whether my form transmits what visitors type before they submit it?

For: An owner or authorized developer at a research-only merchant who suspects a form sends field data to a third party before a visitor presses Submit. — updated 2026-10-01

Which records establish where each kind of payment information actually lives in my setup?

For: A research-only merchant asked by a customer what payment information the store holds, or drafting a statement about how card data is stored. — updated 2026-10-01

Can this aggregated figure or anonymized anecdote still identify a customer in its publication context?

For: A research-only merchant preparing a public sales chart, case study, testimonial summary or community post drawn from real order data. — updated 2026-10-01

How do I describe two vendors accurately when they receive the same customer data for different purposes?

For: A research-only merchant whose email platform, analytics service, payment provider and other vendors each receive overlapping customer information for different reasons. — updated 2026-10-01

Does my hosting region support a promise about where every customer record is handled?

For: A research-only merchant whose privacy text or sales copy claims customer data is hosted, stored or kept in a particular country or region. — updated 2026-10-01