Remarkable Commerce

What Remarkable Commerce is

Remarkable Commerce is a headless eCommerce platform developed in the United Kingdom and used by mid market and enterprise retailers to power web stores, native mobile apps and in store experiences. It centralises product information, content, pricing, promotions, orders and customer profiles, exposes everything through APIs and connects to specialised modules for personalisation, search, marketing automation, payments and order management. Retailers typically deploy a custom storefront on top of the Remarkable Commerce APIs, with one or several brand websites sharing the same back office.

Cookies and data set by Remarkable Commerce

On the storefront, Remarkable Commerce sets first party cookies for the visitor session, the cart, the checkout funnel, the chosen language and currency and the CSRF token. These cookies are strictly necessary to run the store. Once a customer authenticates, the platform stores a long lived identifier to recognise the returning shopper and to populate the wishlist and order history. Optional integrations such as analytics, AB testing, personalisation, search merchandising or marketing automation each add their own cookies and pixels.

GDPR, UK GDPR and ePrivacy implications

Cookies that maintain the basket, the checkout and the authenticated session are strictly necessary and are exempt from PECR Regulation 6 and Article 5(3) of the ePrivacy Directive. All non essential cookies require prior consent, including analytics, personalisation, advertising and any embedded content such as social widgets or product reviews. The retailer is the controller of customer data and uses Remarkable Commerce as a processor through an Article 28 contract that should include the standard subprocessor clauses.

Consent requirements

Configure your consent management platform so that all non essential cookies and integrations are blocked until the visitor opts in. The banner should distinguish strictly necessary cookies that always run from analytics, personalisation and marketing categories that the visitor controls. Provide an equally prominent Reject button, document the consent choices and propagate them to integrations such as Google Analytics, Meta Pixel and any CDP. Inside the checkout, present clear processing notices for payment and fraud prevention.

Data transfers and third countries

Customer and order data hosted by Remarkable Commerce typically stays in the UK or the EU. International transfers can still occur through optional integrations such as a US based payment provider, a global CDN, a US analytics or marketing tool. The retailer must map these flows, list each provider in the privacy notice, rely on the UK extension to the EU US Data Privacy Framework or on the International Data Transfer Agreement and complete a Transfer Risk Assessment for high risk recipients.

Practical compliance steps

Sign the Remarkable Commerce data processing addendum and review the list of subprocessors. Apply data minimisation to customer accounts, set retention rules for guest checkout data, encrypt payment tokens at rest and integrate the platform with a PCI DSS compliant payment provider. Use a single consent management platform that controls both Remarkable Commerce optional features and external marketing tags, document the architecture in your record of processing and run an annual review of the active integrations.