---
title: Optimizely Commerce Connect
slug: dxp/cms12-docs/optimizely-commerce-connect
docTags: 
createdAt: 2026-06-01T17:39:49.858Z
---

## Collect data

- **Contact Data** – Ecommerce customer registers or is registered by the Customer Service Department.
- **Order Data** – Ecommerce customer completes a purchase or is registered by the Customer Service Department.
- **Shopping Cart** – Ecommerce customer adds items to shopping cart. This is viewable by different default admin roles in Commerce Manager.

:::hint{type="info"}
**Note**
Avoid storing this data in other custom locations, or you will be responsible for keeping track of PII data that could be susceptible to GDPR compliance.
:::

Any page requesting input of PII data should be using HTTPS protocol, TLS 1.2 or later.

## Ask for consent

You should activate double opt-in, informing users of their rights and [ask for consent](docId\:MaYZ_dd4e3AdFyRNiidwB). An example of double opt-in is available in the Optimizely Commerce Connect reference site Quicksilver.

## Store data

On-premises installations require encryption of your database instance TDE and encryption at rest.

In Optimizely DXP, TDE is enabled by default. See also [Store data](docId\:TjKr0-t6MKb5qZ_VjtWtW).

## Use data

You should inform the end user about [how the user data is used](docId\:TjKr0-t6MKb5qZ_VjtWtW).

## Fetch data

You should be able to [fetch most data types](docId\:O9XFL_15F_YlYZMvegBrQ) by querying the Commerce Connect database. You can request the

:::Iframe{code="<Anchor title=&#x22;Optimizely Support&#x22; href=&#x22;https://world.optimizely.com/support/&#x22;>"}

:::

Managed Services team to fetch data about a user in cases where you cannot fetch the data yourself.

## Delete data

You should be able to [delete most data types](docId\:TjKr0-t6MKb5qZ_VjtWtW) by querying the Optimizely Commerce Connect database. You can make a request to the

:::Iframe{code="<Anchor title=&#x22;Optimizely Support&#x22; href=&#x22;https://world.optimizely.com/support/&#x22;>"}

:::

Managed Services team for deleting data in cases where you cannot delete the data yourself.