> How Activ8Commerce handles cookies, customer data and US transfers, with GDPR and ePrivacy consent guidance for European online stores and wineries. > > Canonical: https://www.flowconsent.com/en/services/ecommerce/activ8-commerce E-commerce # Activ8Commerce Preferences · [Official website](https://activ8commerce.com) Activ8Commerce is a US based commerce, point of sale and e-commerce platform widely used by wineries, tasting rooms and specialty retailers. It powers online storefronts, club memberships and order processing. When embedded on a website it sets first party session and cart cookies and may load payment and analytics integrations. [Block Activ8Commerce until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=ecommerce) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [E-commerce](https://www.flowconsent.com/en/services/ecommerce) - Consent Preferences - Prior consent Required - Documented cookies 4 - Third-party domains 2 - Servers United States Overview ## What does Activ8Commerce do? ## **What Activ8Commerce is** Activ8Commerce is an end to end commerce platform that combines point of sale, club and membership management, customer relationship management and online storefronts. It is commonly used by wineries, tasting rooms and specialty retailers to sell products, manage orders and process payments. When integrated into a public facing website it operates the shopping cart, checkout and customer account features. ## **Data and cookies it processes** In a standard deployment the platform sets first party cookies to maintain the session, remember cart contents and keep a logged in customer signed in. To complete purchases it processes contact details, shipping and billing addresses and order history, and it passes payment data to a payment processor. Optional analytics or marketing tags may set additional cookies that are not strictly necessary. ## **GDPR and ePrivacy implications** Strictly necessary cookies that run the cart and checkout do not require consent under Article 5(3) of the ePrivacy Directive, but any analytics or marketing cookies do. Processing of customer order data falls under the GDPR, so the website operator acts as controller and must define a lawful basis, inform users transparently and respect data subject rights. ## **Consent requirements** Order processing and payment rely on the performance of a contract and do not need consent. Prior, informed and freely given consent is required before loading any non essential analytics or advertising cookies, and that consent must be as easy to withdraw as it is to give. A consent banner should block non essential tags until the visitor agrees. ## **Data transfers to the United States** Because the platform is hosted in the United States, European customer data is typically transferred outside the European Economic Area. Such transfers need a valid mechanism, namely reliance on the EU US Data Privacy Framework where the vendor is certified, or Standard Contractual Clauses supported by a transfer impact assessment and supplementary measures where needed. ## **Practical compliance steps** Map every cookie the integration sets and classify it as necessary or optional, deploy a consent management platform that gates optional tags, sign a data processing agreement with the vendor, document the transfer safeguards and update the privacy and cookie notices. Review the configuration periodically and keep records of consent. Compliance ## Activ8Commerce and the GDPR Activ8Commerce is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Contract for processing orders and payments (Article 6(1)(b) GDPR); consent for analytics and marketing cookies (Article 6(1)(a) GDPR and Article 5(3) ePrivacy Directive); legitimate interest for fraud prevention and security (Article 6(1)(f) GDPR) - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, PSD2, PCI DSS ### Impact assessment (DPIA) A full DPIA is not usually mandatory for standard order processing, but one is advisable where large volumes of customer profiles, club membership data or behavioural analytics are processed. Assess the US hosting and transfer risk, the scope of payment data handling and any profiling used for marketing. ### Sample text for your banner > We use essential cookies to run our shop and process your order. With your consent we also use analytics and marketing cookies to improve our store and personalise offers. You can accept, reject or manage these at any time. Cookies and trackers ## What Activ8Commerce sets and contacts - Tracking method Server side commerce platform with first party session and cart cookies, optional payment and analytics integrations - Server location United States - Data transferred outside the EU As a US hosted commerce and point of sale platform, personal data of European customers is typically transferred to and processed in the United States. Transfers require appropriate safeguards such as the EU US Data Privacy Framework where the operator is certified, or Standard Contractual Clauses together with a transfer impact assessment. ### Cookies set (4) | Name | Type | Duration | Purpose | | ----------- | ------------------ | ------------- | ---------------------------------------------------------------------------------- | | session | Strictly necessary | Session | Maintains the secure browsing session and keeps a logged in customer authenticated | | cart | Strictly necessary | Up to 30 days | Stores the contents of the shopping cart between page views | | csrf\_token | Strictly necessary | Session | Protects checkout and account forms against cross site request forgery | | \_analytics | Analytics | Up to 2 years | Optional measurement of store usage and conversion, set only after consent | ### Third-party domains contacted (2) - `activ8commerce.com` - `api.activ8commerce.com` Questions ## Frequently asked questions about Activ8Commerce Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Activ8Commerce set? In a standard deployment it sets first party strictly necessary cookies for the session, the shopping cart and form security. If analytics or marketing integrations are enabled, additional non essential cookies may be set, but only after consent. ### Is consent required to use Activ8Commerce? No consent is needed for the strictly necessary cookies that run the cart and checkout. Consent is required before any optional analytics or marketing cookies are loaded. ### What is the legal basis for the processing? Order and payment processing rely on performance of a contract, fraud prevention relies on legitimate interest, and any analytics or marketing relies on consent under the GDPR and the ePrivacy Directive. ### Does it transfer data to the United States? Yes. As a US hosted platform it typically transfers European customer data to the United States, which requires the EU US Data Privacy Framework or Standard Contractual Clauses with a transfer impact assessment. ### Is a DPIA needed? A DPIA is not usually mandatory for ordinary order processing, but it is recommended where large volumes of customer profiles, membership data or behavioural analytics are involved, or where US transfer risk is significant. ### How do I implement it compliantly? Inventory the cookies, gate optional tags behind a consent banner, sign a data processing agreement, document transfer safeguards and update your privacy and cookie notices. ### What are the alternatives? Other commerce and point of sale platforms include EEA hosted e-commerce suites and self hosted store software, which can reduce third country transfer exposure for European merchants. ### How do I update my cookie policy? List each Activ8Commerce cookie with its purpose and duration, separate necessary from optional cookies, describe the US transfer and keep the notice aligned with your consent banner whenever the integration changes. Same category ## More services: E-commerce [See the whole category](https://www.flowconsent.com/en/services/ecommerce) ### [Catch](https://www.flowconsent.com/en/services/ecommerce/catch) [Catch is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Catch supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Catch ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/catch) [Preferences](https://www.flowconsent.com/en/services/ecommerce/catch) · ### [ChannelAdvisor](https://www.flowconsent.com/en/services/ecommerce/channeladvisor) [ChannelAdvisor is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. ChannelAdvisor is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, ChannelAdvisor offers reliable solutions that scale with organizational needs and evolving web standards.](https://www.flowconsent.com/en/services/ecommerce/channeladvisor) [E-commerce](https://www.flowconsent.com/en/services/ecommerce/channeladvisor) · ### [Pxxl App](https://www.flowconsent.com/en/services/ecommerce/pxxl-app) [Pxxl App is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Pxxl App supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Pxxl App ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/pxxl-app) [Preferences](https://www.flowconsent.com/en/services/ecommerce/pxxl-app) · ### [Moder](https://www.flowconsent.com/en/services/ecommerce/moder) [Moder is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Moder provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Moder helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/ecommerce/moder) [Preferences](https://www.flowconsent.com/en/services/ecommerce/moder) · ### [Iamport](https://www.flowconsent.com/en/services/ecommerce/iamport) [Iamport is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Iamport supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Iamport ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/ecommerce/iamport) [Preferences](https://www.flowconsent.com/en/services/ecommerce/iamport) · ### [Posify](https://www.flowconsent.com/en/services/ecommerce/posify) [Posify is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Posify integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Posify helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/ecommerce/posify) [Preferences](https://www.flowconsent.com/en/services/ecommerce/posify) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)