Evan Schuman's StorefrontBacktalk

Although you got a telephone number and directions, Google got information about not only what people in general were searching for (people in Piscataway picked pizza) but also what a specific person was looking for (John Smith—or John's telephone—searched for the number for an AIDS clinic, then a drug store, then life insurance). Again, because Google isn't a phone company or particularly regulated in any way, it could use or sell this information in any way consistent with whatever privacy policy it wrote. But Google got much more than that. Read more...

Dollar General on Thursday (Sept. 8) will launch its first-ever E-Commerce site. It’s not clear why the $13 billion chain hadn’t gone to Web sales some 16 years ago, although Dollar General “waiting to see if this E-Commerce thing isn’t a passing fad” can’t be ruled out. The chain is starting small, with initial plans to offer only 1,000 SKUs, less than one-tenth of the 12,000 SKUs that the 9,500-store chain’s typical locations offer. There are no official plans for in-store-pickup, with shipments the only initial distribution method.

CEO Rick Dreiling told an investor conference call that the E-Commerce site was for “customers who, like many of you, may not have a convenient Dollar General. We plan to sell single items as you would find in our stores as well as larger quantities that we stock in our stores. And from time-to-time, we’ll also feature limited quantities of special buys.” When asked to quantify what he expects the E-Commerce site to do in terms of revenue, the CEO asked for more time to answer. “What I’d rather do is give you an update on that when it has been up and running for a while. This is brand new for us. We do know that there has been request for it. We do know there is demand for it, but I just don’t know enough yet about how it’s going to go, what it’s going to generate.”…

It's not just that the new homepage is cleaner and more open to make it easier to browse (and buy) from a tablet. The same changes—bigger buttons, less clutter and small print—will make the site much friendlier to other customers, too. That could force other E-tailers to throw out the rulebooks for their own aging Web site designs—most of which probably seemed like a good idea in 1995, but haven't been completely revamped since E-Commerce became serious business a decade ago.Read more...

The September 1 Visa Bulletin was primarily to tell merchants that five VeriFone units (Everest Plus units P003-400-01, P003-400-02, P003-400-03, P003-400-12 and P003-400-013) have been ruled "susceptible to compromise" and were indeed "used in tampering and skimming attacks" in the U.S. The list had already included other VeriFone units plus one from Ingenico (the eN-Crypt 2400, also known as the C2000 Protégé) and two from Hypercom (S7S and S8).Read more...

Although there are lots of factors at play here, the primary power benefit of mobile is its battery power supply and, to be quite cold about it, the fact that the customer's device is powered by the customer. The power benefit of M-Commerce is that its power supply is probably a long distance away, somewhere not impacted by whatever is causing a store's power outage.Read more...

Why? What went wrong? Actually, not much, from the point of view of experienced developers. Naturally the site had glitches—that's to be expected. And Target's plan of starting with a new site that had the same basic functionality as the old site, and only later rolling out exciting new features supported by what's baked into the new architecture, was a solid development approach. Unfortunately, although that plan worked very well for developers, it made no sense at all to customers—the people any E-Commerce site is supposed to be all about.Read more...

The dream—and nightmare—of every E-Commerce head is to start over from scratch, scrap all the legacy kludges that developers have been working around for years and build a Web site that does exactly what the chain wants. Most retailers will never be able to cost-justify that greenfield approach, of course. Target's site, however, had to be built from scratch because its decade-long deal with Amazon to operate its online business had expired.Read more...

The great wine-vending kiosk experiment may be just about over, at least in Pennsylvania. Last week (Aug. 15), Wal-Mart told the state’s Liquor Control Board that the retail giant is no longer interested in putting the 10-foot-high machines in 23 of its Pennsylvania stores. That comes after the June announcement by grocery chain Wegmans that it was pulling the giant vending machines out of its 10 stores that had them. And the state now says that if the kiosks’ developer, Simple Brands LLC, doesn’t come up with a $1 million payment by September 19, the plug will be pulled on the remaining 21 machines.

The wine kiosks were an interesting idea, but they may simply have been impossible to get right. There were ongoing mechanical problems (all the machines were taken off-line for repairs temporarily in December) and liability issues, in addition to concerns about whether minors could be blocked effectively from buying wine by the kiosks’ technology for matching a buyer’s face to his driver’s license. But the biggest problem may still be that wine buyers generally like to browse wine labels before making a decision—not buy wine from a glorified Coke machine.…

To be precise, Urban Outfitters is already using them for mobile POS, while Lowe's is just doing inventory and Web site checks but not POS—yet. PacSun on Tuesday (Aug. 23) said that it has already put the Apple devices into more than 300 stores, with 100 stores slated by the end of the year. Combine that with Nordstrom, JCPenney and Gucci all piloting iPads for in-store use, and it begins to look like Apple really does have a lock on in-store mobile devices.Read more...

And failing to take customer privacy into account can have serious consequences, writes Legal Columnist Mark Rasch—the Federal Trade Commission has a decade-long history of going after retailers with unfair or deceptive trade enforcement actions—enforcing customer privacy even in some cases where a retailer has gone belly up.Read more...

Indeed, the associate might have gotten away with it, had he not gotten too greedy and obvious. How obvious? He purchased the chain's most expensive Movado watch—a $2,995 Swiss timepiece with a tungsten carbide bracelet—but not before he "processed an unauthorized markdown" to make the price $2.95. Think a better-than 99.9 percent discount would trigger a flag? The good news for Macy's low prevention: It did indeed trigger a flag. The bad news: Nothing in the system stopped the associate, who had worked for Macy's less than five months at the time, from processing it and having the product shipped.Read more...

While U.S. retailers—including Macy’s and JCPenney—are just starting to get comfortable with item-level RFID, a pair of German supermarket chains is already taking the next step—tagging associates, too. By using active tags, the chains are able to not only handle access to sensitive areas but flag when an employee has been in a freezer too long and may need help.

The grocers, ALDI and Lidl, wanted to offer hands-free access to security areas, said this report from RFID Journal. “Lidl installed a reader inside the freezer near its entrance. When a person with a transponder arrives, the ID number is recognized, unlocks the door and allows him entrance,” the story said. “As he remains in the freezer, the reader continues to read the tag once each second. If it is still reading the tag in 15 minutes, it triggers a loud siren that can be heard outside the freezer.” It’s long been argued that RFID can deliver retail ROI, but only if retailers forget what vendors have promised and start getting creative about discovering their own ways to profitably use the tags to do what can’t easily be done any other way. Looks like ALDI and Lidl have already started thinking outside the box—and inside the freezer.…

PCI compliance doesn't come in grades and is a very clean pass-fail situation. That's why the vendor's headline caught our eyes: "Transaction Wireless First Cloud-Based Digital Giftcard Platform to Earn Highest PCI Level 1 Certification." That is a truly delightful piece of sleight of hand.Read more...

Suppose a customer's phone contains a shopping list of specific apparel items she wants to buy from another retailer—including images of those items or even links to them on the retailer's Web site. A shared screen could make it very easy for an associate to suggest alternatives or help the customer mix and match, whether the items are in the store or not.Read more...

A recent credible survey, however, found that not only are most younger consumers oblivious to what QR codes are, but the many who do know what they are can't get them to function. In short, 83 percent of the 1,300 14- to 24-year-olds surveyed couldn't access a QR code regardless of how good the offer was. Looks like some people skipped an important step in product rollout. That news is pretty bad, given the strong mobile interest—or general high-tech and experimentation comfort level—of that demographic. If they're confused or apathetic, the numbers won't likely get better as surveys examine consumers in their 30s, 40s, 50s, 60s and beyond.Read more...

The developer, Broken Thumbs Apps, isn't a retailer. But the case sets a standard for retailers whose apps may be used by children under 13: Offering underage customers kid-friendly activities puts you squarely in the FTC's sights unless you get parents' permission for every child's information—even if the information will only be used internally.Read more...

"No one has cracked the code on how social media impacts retail. I recently had an agency pitch an app as a way to build brand awareness. I pointed out that for someone to go to the trouble of downloading an app, they already need to be aware of the brand. So at best you could argue that it would help brand engagement, but not brand awareness. Lots of money is being spent in this area. Suspect most of it is being poured down a rat hole." The rat hole is simply that retailers don't have the ability today to understand the social-media influence on retail, and that lack of understanding is almost certainly causing a lot of wasted effort and money.Read more...

The token guidance that the group and the PCI Council staff ultimately released on August 12 was a classic compromise, in that it pleased few in the group but was a huge step forward for retail security. The purpose of such guidelines is not to get so specific that it benefits any vendor, but to give instructions to QSAs and retailers on what is permissible and what isn't. Reaction to the document has fallen into these two camps: one saying that the document was not nearly specific enough and is passing the buck to QSAs, and the other saying that this guidance represents major progress and that it should be applauded.Read more...

Granted, there are shopping carts full of complexities and nuances in analyzing such profiles—generating a meaningful influence rate, if you will—but that's where the fun comes in. Even worse, beyond those analytical complexities, there's the issue of how to get this data in front of the eyes of store associates and also how to do it in a timely matter. Of course, to start things off, there needs to be a reliable way to identify these influencers as they enter your store.Read more...

Let's take this slowly. Circuit City hasn't been an in-store national chain since 2009. But when it liquidated, no one apparently thought about the IP addresses, according to Gabe Fried, the founding principal of Stream Bank LLC, which handled Circuit City's liquidation and is now handling the one for Borders. "The people who knew that [Circuit City] had these assets left the company" rather abruptly when Circuit City didn't find a buyer for the chain and liquidation proceedings began, Fried said. "The problem involved management bandwidth and a lack of knowledge of [the IPv4 addresses'] existence."Read more...

Leach added that the biggest token-related mistake he's seen retailers make is enabling the data to be de-tokenized during chargebacks, refunds or for loyalty tracking. "That's probably the oversight we see most often: not recognizing back channels where the merchant still may receive that account information."Read more...

Visa's new approach will also likely spell the end—within about five-to-seven years—of mag-stripe cards in the U.S., a move that many payment security advocates say is years overdue. To make all of this happen, Visa is bringing its global EMV incentive program—officially the Technology Innovation Program (TIP)—to the States, along with its PCI-relaxation components. (PCI relaxation? There are two words I never expected to see used consecutively.) This means chains that start using specific EMV chip-enabled terminals will be permitted to forego the annual compliance validation nightmare. But Visa has added such a lengthy list of qualifiers and exceptions to the program—along with the practical fact that some chains will opt to do the assessments anyway, for pure security purposes—that it's not clear how many chains will find that incentive compelling enough to do massive hardware swaps.Read more...

Clearly it can be done—Apple Stores let roving associates complete transactions and so does Home Depot for some transactions. But doing it on a large scale with easy-to-shoplift items? The obvious answer is to use technology—and it's possible to do with currently available technology. Unfortunately, there's a tradeoff between privacy and loss prevention that customers may not be ready to make just yet.Read more...

Nohl told The New York Times that mobile operators turn off GPRS encryption "to be able to monitor traffic, to detect and suppress Skype, or to filter viruses, in a decentralized fashion." Unfortunately, that also means thieves with reprogrammed mobile phones can eavesdrop on many M-Commerce transactions using GSM smartphones. And even if payment-card information gets its own layer of encryption, there's still plenty of other personal data that customers would probably prefer not to fall into the hands of thieves.Read more...

This still means there are three big card-swipe terminal vendors in the U.S.—and Hypercom retail customers are at least a little less likely to learn that their products have suddenly reached end-of-life. Under the DOJ-approved deal, Gores is taking over the #3 PIN-pad business in the U.S., with about 18 percent market share. That's big enough that the DOJ wasn't willing to let either VeriFone (at 48 percent) or Ingenico (at 26 percent) simply snap up that chunk of the market. And it should leave three large-enough players to discourage too much coziness, which is certainly what the DOJ was afraid of when it filed a lawsuit in May to block the original shuffle of the business. Read more...