Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Activ8Commerce is a US based commerce, point of sale and e-commerce platform widely used by wineries, tasting rooms and specialty retailers. It powers online storefronts, club memberships and order processing. When embedded on a website it sets first party session and cart cookies and may load payment and analytics integrations.
Activ8Commerce is an end to end commerce platform that combines point of sale, club and membership management, customer relationship management and online storefronts. It is commonly used by wineries, tasting rooms and specialty retailers to sell products, manage orders and process payments. When integrated into a public facing website it operates the shopping cart, checkout and customer account features.
In a standard deployment the platform sets first party cookies to maintain the session, remember cart contents and keep a logged in customer signed in. To complete purchases it processes contact details, shipping and billing addresses and order history, and it passes payment data to a payment processor. Optional analytics or marketing tags may set additional cookies that are not strictly necessary.
Strictly necessary cookies that run the cart and checkout do not require consent under Article 5(3) of the ePrivacy Directive, but any analytics or marketing cookies do. Processing of customer order data falls under the GDPR, so the website operator acts as controller and must define a lawful basis, inform users transparently and respect data subject rights.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Order processing and payment rely on the performance of a contract and do not need consent. Prior, informed and freely given consent is required before loading any non essential analytics or advertising cookies, and that consent must be as easy to withdraw as it is to give. A consent banner should block non essential tags until the visitor agrees.
Because the platform is hosted in the United States, European customer data is typically transferred outside the European Economic Area. Such transfers need a valid mechanism, namely reliance on the EU US Data Privacy Framework where the vendor is certified, or Standard Contractual Clauses supported by a transfer impact assessment and supplementary measures where needed.
Map every cookie the integration sets and classify it as necessary or optional, deploy a consent management platform that gates optional tags, sign a data processing agreement with the vendor, document the transfer safeguards and update the privacy and cookie notices. Review the configuration periodically and keep records of consent.
Websites using Activ8Commerce must obtain user consent under GDPR regulations.
DPIA considerations
A full DPIA is not usually mandatory for standard order processing, but one is advisable where large volumes of customer profiles, club membership data or behavioural analytics are processed. Assess the US hosting and transfer risk, the scope of payment data handling and any profiling used for marketing.
Sample consent text
We use essential cookies to run our shop and process your order. With your consent we also use analytics and marketing cookies to improve our store and personalise offers. You can accept, reject or manage these at any time.
Third-party domains contacted
activ8commerce.comapi.activ8commerce.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| session | Strictly necessary | Session | Maintains the secure browsing session and keeps a logged in customer authenticated |
| cart | Strictly necessary | Up to 30 days | Stores the contents of the shopping cart between page views |
| csrf_token | Strictly necessary | Session | Protects checkout and account forms against cross site request forgery |
| _analytics | Analytics | Up to 2 years | Optional measurement of store usage and conversion, set only after consent |
Activ8Commerce uses cookies for user preferences — inform visitors with a consent banner.
In a standard deployment it sets first party strictly necessary cookies for the session, the shopping cart and form security. If analytics or marketing integrations are enabled, additional non essential cookies may be set, but only after consent.
No consent is needed for the strictly necessary cookies that run the cart and checkout. Consent is required before any optional analytics or marketing cookies are loaded.
Order and payment processing rely on performance of a contract, fraud prevention relies on legitimate interest, and any analytics or marketing relies on consent under the GDPR and the ePrivacy Directive.
Yes. As a US hosted platform it typically transfers European customer data to the United States, which requires the EU US Data Privacy Framework or Standard Contractual Clauses with a transfer impact assessment.
A DPIA is not usually mandatory for ordinary order processing, but it is recommended where large volumes of customer profiles, membership data or behavioural analytics are involved, or where US transfer risk is significant.
Inventory the cookies, gate optional tags behind a consent banner, sign a data processing agreement, document transfer safeguards and update your privacy and cookie notices.
Other commerce and point of sale platforms include EEA hosted e-commerce suites and self hosted store software, which can reduce third country transfer exposure for European merchants.
List each Activ8Commerce cookie with its purpose and duration, separate necessary from optional cookies, describe the US transfer and keep the notice aligned with your consent banner whenever the integration changes.