Maintaining control over your data when shopping online

Every online purchase leaves a trail: contact details, history, preferences, and sometimes much more. This data is valuable, both to the merchant and to potential third parties. Knowing what is being collected, managing your consents, and exercising your rights allows you to enjoy e-commerce without paying for it with your privacy.

What a site really collects

Customer account data

An account brings together your name, address, email, order history, and often a payment method. This information is necessary for the service, but its accumulation paints a precise profile. Providing only what is strictly necessary, and avoiding unnecessary optional fields, immediately reduces what the site knows about you.

Cookies and advertising tracking

Beyond your account, cookies track your browsing to target advertising. The consent banner, often designed to make you click "accept all," hides a more refined choice. Refusing advertising tracking does not impair site usage in any way; it simply limits the resale of your behavioral data.

Managing your consents

Choosing at the cookie banner stage

Take the time to open the settings panel rather than reflexively clicking accept all. Distinguish cookies necessary for the site from those dedicated to advertising, and refuse the latter. This choice is saved for a while, but is worth rechecking, as a site may display the request again after an update.

Managing your preferences in your account

Marketing consents, newsletters, and contact channels can be managed in your help and account management area. Sorting through these cuts down on unnecessary solicitations and limits the use of your data for commercial purposes. This is also where you can withdraw consent given too quickly during registration.

Exercising your rights

Access, rectification, and erasure

Regulations give you the right to access your data, correct it, and request its deletion. A simple written request is enough to initiate this. A reputable site has a dedicated procedure and must respond within a set timeframe, without charging for the exercise of this right.

Requesting account deletion

To close an account and erase your data, send the request via the contact page, specifying your wish for deletion. Certain information, such as invoices, is kept for legal reasons for a specific period. The rest must disappear, which you can verify afterward.

Staying vigilant after purchase

Reacting to a data leak

In the event of an announced breach on a site, change the password in question—especially if it is used elsewhere—and monitor your accounts. The support team usually specifies the data affected and the measures to take. A reused password turns a leak on one site into a problem for all the others.

Data and subscription services

A subscription keeps your data as long as it is active, and sometimes beyond. Upon cancellation, check what happens to your history and request its erasure if you do not intend to return. An account left open without use remains an unnecessary gateway to your information.