Home
User Guide
The information contained in this section applies to WebSphere Commerce Version 8. The documentation also applies to all subsequent releases and modifications until otherwise indicated in a newer section.WebSphere Commerce is a single, unified e-commerce platform that offers the ability to do business directly with consumers (B2C), directly with businesses (B2B), and indirectly through channel partners (indirect business models). WebSphere Commerce is designed to be a customizable, scalable, and high availability solution that is built to leverage open standards. It provides easy-to-use tools for business users to centrally manage a cross-channel strategy. Business users can create and manage precision marketing campaigns, promotions, catalog, and merchandising across all sales channels.
Compliance
The following section describes how you can leverage WebSphere Commerce features and functionality to help your site be compliant with different privacy and security standards.
GDPR and WebSphere Commerce
WebSphere Commerce provides documentation and functions that your organization can use to help it on the journey to GDPR readiness. If your store operates within the European Union (EU), sells products or services to those people in the EU, or monitors the behavior of EU data subjects, your site likely needs to be GDPR compliant from May 25, 2018.
Privacy and consent
WebSphere Commerce provides storefront and business user functionality that your site can use to present your privacy information and provide consent management options to your shoppers.

User Guide
The information contained in this section applies to WebSphere Commerce Version 8. The documentation also applies to all subsequent releases and modifications until otherwise indicated in a newer section.WebSphere Commerce is a single, unified e-commerce platform that offers the ability to do business directly with consumers (B2C), directly with businesses (B2B), and indirectly through channel partners (indirect business models). WebSphere Commerce is designed to be a customizable, scalable, and high availability solution that is built to leverage open standards. It provides easy-to-use tools for business users to centrally manage a cross-channel strategy. Business users can create and manage precision marketing campaigns, promotions, catalog, and merchandising across all sales channels.
- Planning
  Creating a custom implementation of a WebSphere Commerce store requires a significant amount of planning. From gathering client needs, to deploying the live solution, much work is needed to successfully deploy a custom client store. Use the resources in here to help you plan every phase of store creation.
- Installing
  Review the following sections for information about installing the WebSphere Commerce product, associated maintenance, and WebSphere Commerce enhancements.
- Migrating
  Before you migrate to WebSphere Commerce Version 8.0, review this information to help plan and execute your migration.
- Deploying
  The topics in this section describe how to publish stores to either a test or production environment, and how to deploy customized code.
- Operating
- Integrating
  Topics in the Integrating category highlight the tasks that are commonly performed for using WebSphere Commerce in combination with other products.
- Administering
- Tutorials
  WebSphere Commerce provides many tutorials to help you customize and understand your WebSphere Commerce instance and stores.
- Samples
- Developing
  The topics in the Developing section describe tasks performed by an application developer.
- Compliance
  The following section describes how you can leverage WebSphere Commerce features and functionality to help your site be compliant with different privacy and security standards.
  - GDPR and WebSphere Commerce
    WebSphere Commerce provides documentation and functions that your organization can use to help it on the journey to GDPR readiness. If your store operates within the European Union (EU), sells products or services to those people in the EU, or monitors the behavior of EU data subjects, your site likely needs to be GDPR compliant from May 25, 2018.
    - Privacy and consent
      WebSphere Commerce provides storefront and business user functionality that your site can use to present your privacy information and provide consent management options to your shoppers.
      - Privacy policy acceptance
        Privacy policy acceptance refers to the process of informing shoppers about the privacy details for your site and prompting shoppers to accept the privacy policy. WebSphere Commerce provides a combination of sample store pages, content, and business user functions to help your organization create the privacy policy pages for your store. Your organization can use the pages as a method to inform your shoppers about the privacy policy details for your site and to prompt shoppers to agree to your policy when they first visit the store. If needed, you can use the privacy policy pages to request and obtain consent from shoppers for collecting and processing personal and behavior data from the shoppers, such as for marketing purposes.
      - Consent management
        Consent management refers to the process of obtaining consent from shoppers to collect and process their personal and behavior data.WebSphere Commerce provides a combination of store pages, content, and business user functions that your organization can use to customize your store to request and obtain consent from shoppers. For instance, your store can request and obtain consent from shoppers for collecting and processing personal and behavior data from the shoppers, such as for marketing purposes.
      - REST API enhancements
        WebSphere Commerce provides several privacy-oriented REST API enhancements. Some are designed to provide the ability for shoppers to opt-in or opt-out of providing consent for any targeted personalization or marketing activities or promotions. Others are for internal use by Data Protection Officers.
    - Right to access
      Right to access, in accordance with the GDPR, is the right for an individual to access their personal data upon request. To help support this requirement, WebSphere Commerce provides a set of SQL queries. If your site uses custom tables or columns to store personal data, customize the queries as needed. It is your responsibility to define a GDPR-compliant process for handling right to access requests.
    - Right to erasure
      Right to erasure, in accordance with the GDPR, is the right for an individual to require that their personal data is deleted when the individual requests it. To help support this requirement, WebSphere Commerce provides a set of SQL queries. If your site uses custom tables or columns to store personal data, customize the queries as needed. It is your responsibility to define a GDPR-compliant process for handling right to erasure requests.
    - Data protection by design and default
      Data protection by design and default, in accordance with the GDPR, requires that customer data is encrypted during all communications, internal and external. Enable a Secure Sockets Layer (SSL) connection for data transfer between WebSphere Commerce servers and the database.
  - WebSphere Commerce and the PCI Data Security Standard
    The Payment Card Industry (PCI) Data Security Standard (DSS), developed by the founding payment brands of the PCI Security Standards Council, including American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International, facilitates the global adoption of consistent data security measures.
- Securing
  These topics describe the security features of WebSphere Commerce and how to configure these features.
- Performance
- Troubleshooting

Privacy and consent

WebSphere Commerce provides storefront and business user functionality that your site can use to present your privacy information and provide consent management options to your shoppers.