| Adding example of the current new order form Selection_999(167).png (40,342 bytes) Selection_999(166).png (45,165 bytes) | |
Selection_999(165).png (55,516 bytes) | |
| I may be missing something here, but putting the responsibility of removing customer information on merchants doesn't seem to me the ideal way of going about this. If Taler as a project considers that certain customer information should not be kept by merchants after it is no longer needed (e.g. the customer’s shipping address), why not introducing this behaviour by design? Essentially, after an order has been fulfilled, and taking into consideration the TAX_RECORD_EXPIRATION value, Taler deletes the customer information that is no longer needed, rather than relying on merchants marking fields as "forgettable". If a merchant chooses to use Taler, they do so because they are responsible merchants regarding privacy, and want to do the right thing. We should help them with that, by introducing privacy-preserving best practices (like forgetting customer information whenever possible) by design. | |
- Anonymous