GDPR and why we like the popup
-
I read and understand the reasons for breaking the modal popup by adding an extra non-functional page first. In considering an alternative, please understand what is the merchant objective here.
– The average small vendor using free software is not employing full time IT staff to manage their security etc. The small vendor should not have to take legal responsibility for the safe storage of the credit card data and its handling according to data protection legislation.
– The customer should not trust the small vendor with their credit card details, so should not pay using the inline credit card form which should not be “the preferred method”.Instead, when the customer should be presented with a paypal or stripe branded page and have confidence that they are only providing credit card data to the payment provider.
This ties in with @gingeralfie comments on GDPR compliance and cookies – the store should not be managing the payment and related cookies etc, Stripe should be managing the payment, as is the case with paypal etc.
Instead of the inline credit card form or the now broken modal popup flow, the third option needed (which may be legally required in Europe from May) is for the customer to transfer to a Stripe screen for payment and enter the card details there, as happens with paypal etc.
- The topic ‘GDPR and why we like the popup’ is closed to new replies.