E-Commerce websites have to collect certain pieces of personally identifying information in order to process transactions. Amazon.com is no different. However, the technology they use to secure this information has evolved in recent months in an attempt to attract not only the every day consumers but also large enerprises. But to understand where they are now, let's first look at where they've been.
WHAT
There are basically 5 pieces of information required to complete any online transaction:
- Name (matches name on credit card)
- Physical address for shipping and authentication (matches address of card holder)
- Email address (for sending purchase receipt and order confirmation)
- Credit card number
- Credit card expiration date
HOW
Once you enter this information and click on the button that completes your order, the data is transferred via SSL (Secured Socket Layer) protocol. SSL is a data encryption method that can exist on both the client and server side. Essentially it takes sensitive data that you enter, encyrpts it into a secure format, transmits it across the internet in that secure format, and is finally decrypted on the receiving end by the destination server. Amazon uses SSL for the transmission piece and more advanced data encryption methods to protect customer data stored on their servers.
Amazon states in their Privacy Policy that they do not sell, trade, or rent personal information. Additionally, they offer many different methods for submitting required information in a manner that may add addtional "peace of mind" to customers. Click HERE for an in-depth look at the most recent Amazon Privacy Notice.