---
title: Optimizely Commerce Connect
slug: dxp/docs/optimizely-commerce-cloud
createdAt: 2026-07-30T20:33:08.367Z
---

## Collect data

- **Contact Data** – Ecommerce customers register or are registered by the Customer Service Department.
- **Order Data** – Ecommerce customers complete a purchase or are registered by the Customer Service Department.
- **Shopping Cart** – Ecommerce customers add items to their shopping cart. This is viewable by different default admin roles in Commerce Manager.

:::hint{type="info"}
**Note**
Avoid storing this data in other custom locations, or you will be responsible for keeping track of PII data that could be susceptible to GDPR compliance.
:::

Any page requesting input of PII data should be using HTTPS protocol, TLS 1.2 or later.

## Ask for consent

You should, by default, enable double opt-in, informing the end user of their rights and [ask for consent](docId\:MaYZ_dd4e3AdFyRNiidwB). An example of double opt-in is available in the Optimizely Commerce Connect reference site Quicksilver.

## Store data

On-premises installations require encryption of your database instance TDE and encryption at rest.

In Optimizely DXP, TDE is enabled by default. See also [Store data](docId:35Fcib0bMCfkyDQJqM-2d).

## Use data

You should inform the end user about [how the user data is used](docId\:TjKr0-t6MKb5qZ_VjtWtW).

## Fetch data

You should be able to [fetch most data types](docId\:O9XFL_15F_YlYZMvegBrQ) by querying the Commerce Connect database. You can request the [Managed Services team](https://world.optimizely.com/support/) to fetch data about a user in cases where you cannot fetch the data yourself.

## Delete data

You should be able to [delete most data types](docId\:dV_H5mK7Qip-HvRR9q-tM) by querying the Optimizely Commerce Connect database. You can make a request to the [Managed Services team](https://world.optimizely.com/support/) for deleting data in cases where you cannot delete the data yourself.