Recent additions

First-party data is information a business collects directly from its own customers through channels it owns and controls — including its ecommerce store, email newsletter, mobile app, loyalty programme, and customer accounts.

A Consent Management Platform is the software layer that collects, stores, and signals cookie and tracking consent on ecommerce sites.

Deceptive UI/UX practices that manipulate users into taking actions they would not otherwise choose — or prevent them from exercising choices they are entitled to make.

A Digital Product Passport (DPP) is a structured digital record linked to a physical product via a unique data carrier (QR code, NFC tag, or RFID chip).

A Google Ads feature that supplements existing conversion tags by sending hashed first-party customer data (email address, name, phone number, home address) to Google using SHA-256 one-way hashing, allowing Google to match conversions to signed-in Google accounts and recover attribution lost to cookie failures, cross-device journeys, and consent-driven data gaps.

Regulation (EU) 2016/679 (General Data Protection Regulation), in force since 25 May 2018, is the primary EU data protection law governing how online retailers collect, process, store, and share personal data of EU/EEA residents.

The Google Ads Conversions API is Google's server-to-server mechanism for importing conversion data — purchase events, leads, offline sales — directly into Google Ads from a retailer's own backend, bypassing the browser entirely.

Google's mechanism for signalling user consent states from a [[Consent Management Platform (CMP)]] to Google's advertising and measurement tools (GA4, Google Ads, Google Marketing Platform).

The IAB TCF is a technical standard created by IAB Europe to help publishers, advertisers, and ad-tech vendors comply with European privacy regulations — principally [[GDPR in Ecommerce]] and the [[ePrivacy Directive]] — by standardising how consent signals are communicated across the programmatic advertising ecosystem.

Google's server-side implementation of [[Server-Side Tracking]] via a Docker container — typically deployed on Google Cloud Run or managed hosting — that intercepts browser events and forwards them to analytics and advertising platforms via server-to-server APIs rather than client-side JavaScript.

Directive 2002/58/EC (as amended by Directive 2009/136/EC) — colloquially the "Cookie Directive" or "Cookie Law" — is the EU law that governs privacy in electronic communications and mandates consent for placing or reading tracking technologies on a user's terminal device.

A **Binding Tariff Information (BTI)** is a legal decision issued by an EU Member State's customs authority that fixes the tariff classification of a specific product, giving the importer legal certainty on which Combined Nomenclature code — and therefore which duty rate — applies.

The **Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013**…

The **Consumer Rights Act 2015 (CRA)** is the UK statute that codifies a consumer's rights when…

The input every [[Gross Margin]] calculation starts from: the **direct cost of producing the goods…

The **Digital Markets, Competition and Consumers Act 2024 (DMCC Act)** is the UK statute that…

Directive (EU) 2019/770 on contracts for the supply of digital content and digital services — the EU-wide regime governing conformity and remedies when a consumer buys (or supplies personal data for) digital content or a digital service.

The body of UK and EU consumer law governing **digital content** — software, downloads, streaming, games, in-game purchases, e-books, apps — supplied online and **not on a tangible medium**.

**Distance selling** is the umbrella legal regime governing contracts a trader concludes with a…

The **EU AI Act** (Regulation (EU) 2024/1689) is the EU's horizontal, risk-based law governing the…