For Business

Data Subject Rights Requests for customers

What are Data Subject Rights Requests?

Privacy laws, including the GDPR and various state privacy laws, expand an individual’s right to access and delete their personal information. Businesses subject to these laws must provide certain data subject rights, including access and deletion

How you can use Buy with Prime to address data subject rights requests from your customers

When you receive a data subject access or deletion request from a customer, use the following steps and submit a support ticket to Buy with Prime to process the request. Only the Owner can submit a support ticket to Buy with Prime to process a data subject access or deletion request on behalf of a customer.

Submit a data subject rights request support ticket on behalf of a customer

Only the Owner can submit a support ticket to Buy with Prime to process a data subject access or deletion request for a customer. If a Staff or Admin submits the ticket, merchant support will follow up to have the Owner file a ticket.

To process a data subject access request:

Step 1 Acknowledge the receipt of the request and verify that the identity of the requester matches the customer whose data is being requested. For example, you can ask the requester to share their recent order transaction details.

Step 2 In the Buy with Prime merchant console, choose the Get support tab, then choose Contact us.

Step 3 Select Security and Privacy as the issue category.

Step 4 Choose how you’d prefer to be contacted.

Step 5 Enter following details into the support ticket:

  • Type of Request: Customer DSAR
  • Customer Requester email

Step 6 Select Submit case to file the ticket.

Step 7 Merchant support will update the support case correspondence with the personal information we store about the requester through a URL link. Important: Download the results from the URL link to share with the requester directly. If the URL link expires before you are able to download the results, please reply in the support case correspondence to request a new URL link.

Step 8 You can combine the results with any other information you store about the requester, and then provide it to the requester.

To process a data deletion request:

Step 1 Acknowledge the receipt of the request and verify that the identity of the requester matches the customer whose data is being deleted. For example, you can ask the requester to share their recent order transaction details.

Step 2 Inform the requester that once their data deletion request is processed, they will no longer be able to access their Buy with Prime orders associated with your DTC site, or request returns or refunds for these orders.

Step 3 In the Buy with Prime merchant console, choose the Get support tab, then Contact us.

Step 4 Select Security and Privacy as the issue category.

Step 5 Choose how you’d prefer to be contacted.

Step 6 Enter following details into the support ticket:

  • Type of Request: Customer Data Deletion
  • Customer Requester email

Note: File the support ticket as soon as you receive the request to allow enough time to process the request and respond to the requester within the required timeframe.

Step 7 Select Submit case to file the ticket.

Step 8 Buy with Prime will process the data deletion request after a 7-day buffer period from the original requester data deletion request submission date, during which time you can cancel the request. Note: Customer requests should be submitted as soon as possible. To cancel a pending deletion request, please reply in the support case correspondence to request a cancellation. Important: If the requester who submitted a data deletion request has any open orders at the time they made their request, Buy with Prime won’t be able to process the data deletion request. The requester will need to resubmit their request once all open orders have been completed.

Step 9 Once the data deletion request has been processed, merchant support will update the support case correspondence confirming that the customer’s personal information has been deleted.