Evan Schuman's StorefrontBacktalk

The Harvard researchers focused their attention mainly on Groupon and its customers. For retailers, most of the risk appears to come from failing to treat vouchers correctly at the POS—usually those vouchers are like giftcards, but in some ways they're like coupons. Getting the treatment right is likely to require some under-the-covers work on POS software, which is nobody's idea of a comfortable project. The alternative, though, is to leave it for associates to handle them correctly ad hoc—and that's just asking for trouble.Read more...

This might return us to the "Wild West" days of selling personal information to anyone for any reason, writes Legal Columnist Mark Rasch. Then again, it may not. But for now, at least, the case will provide something of a backstop legal defense to retailers that use personal information for marketing purposes when someone has not explicitly given their permission.Read more...

Before downloading the Twitter Commerce app, a user must agree that the vendor can read the consumer's tweets (including private direct messages), "follow new people," "update your profile" and—my personal favorite—"post tweets for you." Yeah, what consumer would have any problem with any of that? A third-party wants to send tweets out under my name? No problem. "I don't think it's the best choice of words," said Harrison Lee, the Tweetalicious co-founder/chief marketing officer, who also dubbed the warnings "intimidating." But, he added, it's not his firm's fault; Twitter dictated that wording.Read more...

In fact, the vast majority of our stories (often 80 percent or more) are deliberately not Premium. We are hoping that these colorful images will make it easier to tell which stories are Premium and which ones can be read in their entirety by non-Premium subscribers. We're hoping that this clarification cuts back on the frustration of non-Premium readers who click on stories that they can't read fully as well as encourages readers to click on a story, confident that it's entirely available to them. This is also a good time to explain how StorefrontBacktalk decides which stories are Premium.Read more...

One of the great things about mobile-marketing efforts today is that they can sometimes take the seemingly innocuous—something that always has been truly innocuous—and turn it into a little-noticed CRM bonanza. Consider a contest announcement made on Wednesday (June 15) by an American Eagle Outfitters brand (Aerie), where consumers were asked to use an app (Pose) on their phone to shoot pictures of people wearing that chain’s clothing.

The winning pictures would be displayed on the chain’s 25-story Times Square LED screen, and the photographer would get a $150 Aerie giftcard. The real prize goes to American Eagle, which can analyze and leverage the metatag data associated with each photo, revealing brand, store location, where the photo was shot and price. Shortly, such images could report back with much greater detail, including SKU, and, with near field communication, data could even include CRM history of both the photographer and the person being photographed. When they wrote that a picture’s worth a thousand words, they may have been frighteningly accurate. …

When the customer called Best Buy corporate communications for an explanation, he got yet another story: It was all due to a system test that the customer himself asked for in 2009, when he had trouble ordering a laptop for home delivery. Except that this customer never ordered anything from Best Buy for home delivery. Now he's left wondering whether Best Buy was hacked, the E-tailer just didn't bother to warn customers about a database glitch that swapped around account information, or someone really did talk customer service into changing his account information while ordering a laptop in 2009.Read more...

The big difference between merchants and issuers is how they validate their compliance. Or, more accurately, whether they even need to validate their compliance. We should give Citigroup credit for going public to the extent it has fairly soon after the breach. But other than replacing the compromised cards, we have not read anything to indicate what Citi is doing internally to fix its system and network vulnerabilities.Read more...

There are two elements to mobile payment that need that standardization: payment card security and other payment data. The retail need for consistency of payment security will be handled cleanly by the PCI Security Council, whenever it gets around to it, most likely before the end of this year. The more critical area, though, is all of the data involved, whether it's CRM, giftcards, coupons or anything else. And a later stage of the data mess will be two-way near filed communication (NFC), which is when things will get both interesting and ludicrously complex. If there are multiple competing wallets—say from Google, Apple and ISIS—how easily will it be to deal with all of that data in a homogeneous fashion?Read more...

The most glaring difference was for projected hiring. When compared with the national numbers and against seven other verticals (manufacturing; finance, insurance and real estate; professional services; construction; wholesale; transportation; and business services), retail CIOs were the most optimistic about hiring IT people, tying manufacturing, with 9 percent of both segments' CIOs saying they plan to add staff and one percent saying they plan to reduce staff. The national average is 7 percent to hire and 3 percent to reduce. Three percent of wholesale CIOs say they plan to hire, with zero planning to reduce. Finance CIOs also have 3 percent planning to hire, although 8 percent plan to reduce.Read more...

If Apple, PayPal and others opt for their own approaches, which seems inevitable, the fragmentation will make it even harder for consumers to embrace mobile payments and for any retailer to get enough traction for mobile to be profitable. Indeed, the Google exec who handled much of the rollout—Google Payments VP Osama Bedier—used that event to lay out the case for why multi-platform support is so crucial. At the time, though, he was making the case for openness everywhere other than mobile platforms. Still, his argument works.Read more...

Those results suggest that keeping encryption keys, administrative passwords and other IT security elements from being under the control of a single employee is possible, and even practical, but that too many companies aren't following up on it. And last month brought a reminder of how big a problem that can be: A judge ordered a former San Francisco network engineer to pay $1.4 million in restitution for locking city IT managers out of the city's network for 12 days.Read more...

The security issue cropped up because the chain wanted to do extensive beta testing with customers before offering the final version of the application to the world. Security policies with Apple's iPhone and Research in Motion's BlackBerry, among others, require that only tested and approved apps can be installed on their phones. Android's more lax application security process made it the more desirable platform. "The service is only available publicly to Android phone owners at this time, because we don't want the app in its current state going into the public app stores. Only Android easily offers the ability to install apps from 'Unknown Sources,'" wrote Nick Lansley, who manages IT R&D projects at Tesco.Read more...

Actually, the news reports were based on local-news stings in only two cities, Sacramento and Philadelphia, where reporters specifically bought holiday items at full price and then waited until the items went on sale before returning them with gift receipts. And because Wal-Mart's gift receipts include a barcode containing the price, it seems likely that the training of customer-service associates could be to blame. Besides, why would Wal-Mart sabotage its own CRM and inventory-management efforts by intentionally mishandling returns?Read more...

Sharing on social networks could be a CRM bonanza—there's a seemingly endless flood of data on what people are doing and buying. Retailers know how valuable that data can be and how hard it is to pry information loose from customers, which makes social tantalizing. But it's easy to forget that helping retailers isn't why customers are playing the social game. Neither is throwing away every shred of privacy. It may be that what social users really want is some attention—and their purposes don't always align with those of retailers.Read more...

Envision an approach that merges geolocation, mobile communication, social sites and—critically—a trusted retail brand and in-store interactions. Put it all together and the future may not look so dim for in-store, after all. Starbucks, which did not want MacLaren elaborating on the concept, said he gave one example as Starbucks’ existing MyStarbucksIdea.com. For the sake of humanity, let’s hope his vision is light years beyond that site, which has a strangely narcissistic quality to it.Read more...

As companies start to make inroads into mining the vast social data fields, early strategies are emerging. For example, one company—Attensity—says the best course is not to take a customer database and try and match it with social profiles floating around. It’s better to do the reverse—find the data in Social Land, look for helpful datapoints and then try and match it with the customer list. Why is that approach better? It’s more efficient. The discovered useful datapoints are valuable on their own, even without a customer match.

Attensity hasn’t done this for a retailer directly, but it is working with two chains through Teradata. When Catherine van Zuylen, Attensity’s VP of global product management, was asked how she feels about the privacy ethics of doing these searches and associations, she paused and said wisely: “We just make the tools. It’s really up to the individual retailers to use those tools for good or evil.” Didn’t Maxwell Smart say that?…

Mining tens of petabytes of data may sound like overkill for most retailers, but on May 20 IBM announced new tools for analyzing that level of data in less than a second. The move is really not too much overkill. As retailers start searching social-networking sites to flesh out their CRM data on customers, adding huge amounts of data from mobile on top of more facts being retained from M-Commerce, this capability could prove a lot more useful.

Unlike data on actual purchases, social-network data is literally out of anyone’s control. It ranges from static Facebook data to rapid-fire information in tweets. If a chain can track such data and react to it in real time, that could make huge-data analysis useful—even if it means merely spotting customer complaints bubbling up. But it would be especially useful if the analysis lets a retailer see almost everything customers are interested in. The fact that Big Blue is claiming to be able to tackle those mountains of data while it is still in its native format makes this announcement even more intriguing.…

While this porn kiosk touts privacy, which would seem to make sense, it also requires a driver's license and a payment card. Those two documents certainly are good ideas, especially when arguing to retailers that the machines will not be usable by minors, but both also obliterate the claims of privacy. The issue speaks to all kiosks, but this case is a wonderfully extreme example.Read more...

The centerpiece, from a company called Aetrex, is something the store calls iStep Wave and its claim is that it can go beyond measuring shoe size to examine arch type and pressure points—and do it all in half-a-minute. The store says the device uses "3,744 gold-plated barometric sensors that measure the pressure exerted by your foot every 0.25 cm squared and 1,326 infrared LEDs and receptors that are aligned every half millimeter."Read more...

The idea of aggregating the shopping and other experiences of a closed community is a good one, with lots of potential to boost the meaningfulness of such results. There's also a downside with this aggregation approach, namely that most consumers trust different friends to very different degrees.Read more...

As a result, it should be easier for Nordstrom to quickly add new devices and new functions to the mobile POS system. Features that the iPod doesn't support, such as contactless payment, might be available on other devices. In theory, with a well-structured architecture, new devices could be swapped in on an as-needed basis. Unlike mobile POS pioneers Home Depot (which uses a highly customized handheld for its mobile POS) and Apple (which can only use Apple, naturally), Nordstrom can exercise its option to do small-scale experiments with devices from multiple vendors in the midst of its big rollout. That will also discourage developers from tying code too tightly to one device—giving Nordstrom the chance to do even more quick-hit experiments in the future.Read more...

Even if the Supreme Court rules that customers don't have a right to privacy in their location, retailers still face a dilemma, writes Legal Columnist Mark D. Rasch. For example, smartphone apps can leverage GPS or other location data and enable new sales and marketing opportunities. But consumer backlash may result in new regulation to restrict the collection and use of this information. If you fail to have clear and unambiguous privacy policies that state what you are collecting and why and then follow these policies, either the consuming public or the government will make you do it.Read more...

Beefing up security for more than payment-card data isn't a new idea, but it's unfortunate for retailers that Apple got so sloppy with its users' location data. Spotting customers as they're headed for a store is the holy grail of retail mobile-location technology, whether via GPS, Wi-Fi, cell-tower triangulation or POS tracking, and right now that's all getting a slightly creepy reputation. But in practice, it's going to become the norm—retailers will just need to get their best customers to opt in.Read more...

One convenience chain found that level of anonymity sharply boosted profits when selling triple-sized sandwiches and Pennsylvania is hoping that having a machine tell customers they're too drunk to buy wine will be less humiliating. But with data breaches an almost daily news story and data-sharing presumed to be everywhere, will customers continue to stay comfortable with sharing intimacies with kiosks? That question is being raised now with the latest push on clothing kiosks that use radio waves to take hundreds of thousands of measurements to deliver what the machine promises will be the perfect clothing fit.Read more...

Most current mobile-payment approaches—including the mobile wallet Visa announced this week—are still based on the payment-card accounts Visa currently makes its money from. But eventually someone will come up with a better way and leapfrog over the card companies. Then Visa will be stuck with a large, expensive network for real-time transaction processing. That could explain why Visa wants to use its new service to follow cardholders around from one retailer to another.Read more...