---
schema_version: "1"
id: bb1988842261043fae5b54804df9f04b5c85cfcd10f3839c43d7787ad2274ed3
title: Consent Management for B2C Commerce
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/consent_management_commerce.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.consent_management_commerce.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: de8e475ee56e857c37ab2fbd1d3ab0c335691797c80e7463906dd4105d157c1b
description: Honor and respect your customers’ wishes when they request only specific forms of contact from your company or opt-out of certain types of data-sharing. We provide details to help you determine the best way to comply with the data protection and privacy regulations that apply to your company.
products:
  - Security
  - Cross Cloud
release: "264"
---
# Consent Management for B2C Commerce

Honor and respect your customers’ wishes when they request only specific forms of contact from your company or opt-out of certain types of data-sharing. We provide details to help you determine the best way to comply with the data protection and privacy regulations that apply to your company.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: All Editions</td></tr></tbody></table>

Track your shoppers’ approval for how your company interacts with them. Data subjects have the right to consent to the use of their personal data and can object to the processing of their personal data with respect to receiving marketing communications, online tracking, and user profiling. To help you assess your compliance with various data protection and privacy regulations, we give you examples of common shopper requests. And we provide details to help you determine the best way to comply with the regulations that apply to your company. For instance, a shopper visits a website and doesn’t want any of their information tracked while visiting the site.

Many data protection and privacy regulations require you and your company to honor people’s requests about how you use their data. We’ve listed a few of the regulations that are important to many companies collecting and processing their customers’ data.

- General Data Protection Regulation (GDPR), European Union
- California Consumer Privacy Act (CCPA), United States
- Personal Information Protection Act (PIPA), Japan
- Privacy Act, Australia
- Personal Information Protection and Electronic Documents Act (PIPEDA), Canada

If you have shoppers who request specific methods of contact from your company, review these common requests and the procedures related to them.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
        <colgroup>
          <col style="width:33.33333333333333%">
          <col style="width:33.33333333333333%">
          <col style="width:33.33333333333333%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d29916e64">Common Customer Request</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d29916e66">Actions to Consider</th>
            <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d29916e68">Things to Consider</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="Common Customer Request" class="slds-cell-wrap" style="vertical-align:top;" headers="d29916e64 ">I don't want your site to track my personal information for marketing or other
              purposes.</td>
            <td data-label="Actions to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d29916e66 ">
              <p><a href="https://documentation.b2c.commercecloud.salesforce.com/DOC1/topic/com.demandware.dochelp/content/b2c_commerce/topics/admin/b2c_setting_privacy_preferences.html" target="_blank">Set the Tracking site preference</a></p>
              <p><a href="https://documentation.b2c.commercecloud.salesforce.com/DOC1/topic/com.demandware.dochelp/DWAPI/scriptapi/html/api/class_dw_system_Session.html" target="_blank">Programmatically override the site preference
                  using the Script API</a></p>
              <p style="margin-bottom:0;"><a href="https://documentation.b2c.commercecloud.salesforce.com/DOC1/topic/com.demandware.dochelp/LegacyDevDoc/SiteGenesisStandardsCompliance.html#StandardsCompliance__tracking" target="_blank">Read about a sample consent tracking
                  implementation in SGJC (SiteGenesis JavaScript Controllers)</a></p>
            </td>
            <td data-label="Things to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d29916e68 ">
              <p>A new site preference, Tracking, lets you set default tracking behavior for
                each storefront.</p>
              <div>
                <p>If you want to override this behavior for an individual
                  shopper, you can implement your own consent management solution by calling the
                </p>
                <pre class="line-numbers slds-box slds-box_x-small slds-theme_shade slds-m-top_medium slds-m-bottom_medium slds-scrollable_x"><code>dw.system.Session.isTrackingAllowed()</code></pre>
                <p>
                  and
                </p>
                <pre class="line-numbers slds-box slds-box_x-small slds-theme_shade slds-m-top_medium slds-m-bottom_medium slds-scrollable_x"><code>dw.system.Session.setTrackingAllowed(boolean)</code></pre>
                <p>
                  methods.</p>
              </div>
              <p style="margin-bottom:0;">Session cookies are used by default, so you might want to discuss them
                with your legal team.</p>
            </td>
          </tr>
          <tr class="">
            <td data-label="Common Customer Request" class="slds-cell-wrap" style="vertical-align:top;" headers="d29916e64 ">I don't want your app to track my personal information for marketing or other
              purposes.</td>
            <td data-label="Actions to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d29916e66 ">Determine shopper's tracking preference using the Shop API HTTP/HTTPS headers.
              Search for the OCAPI Global HTTP Headers topic.</td>
            <td data-label="Things to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d29916e68 ">Shop API resources let you set the HTTP(s) header DNT, which indicates whether
              personal information should be tracked.</td>
          </tr>
          <tr class="">
            <td data-label="Common Customer Request" class="slds-cell-wrap" style="vertical-align:top;" headers="d29916e64 ">I want to know which cookies your site uses to store information about
              me.</td>
            <td data-label="Actions to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d29916e66 ">
              <p><a href="https://documentation.b2c.commercecloud.salesforce.com/DOC1/topic/com.demandware.dochelp/DataProtectionAndPrivacy/LocalDataStorage.html#LocalDataStorage" target="_blank">Review the local browser storage topic</a> to
                understand the usage and lifespan of data stored locally.</p>
              <p style="margin-bottom:0;">Inform the shopper of cookies that might be relevant to their usage.</p>
            </td>
            <td data-label="Things to Consider" class="slds-cell-wrap" style="vertical-align:top;" headers="d29916e68 ">Many cookies are automatically deleted at the end of each session, but some
              have longer lifespans. A system or browser crash can prevent deletion.</td>
          </tr>
        </tbody>
      </table>