Page Comparison

• Creating Guest Token- To place an order as a Guest users require to have be authenticated on our platform. In order to do that we need to create a Guest Auth token. We can’t follow the current path for collecting it because Guests don’t have accounts in Cognito and in the User DB entries.

• Preventing the guest user from seeing app content dedicated for registered users only

• Add a security layer limiting actions allowed for the orders with Guest token. Actions allowed for example: priceOrder, validateCommitOrder, commitOrder, getOrder, etc

• Add configurable time period of storing the Guest Order data in the database. Configure to 10 year for DE

• Added Modal to continue as a guest

  

• Adjusted data on the confirmation page

• QA Testing
  

25 Oct 2023

• Accommodate new transactional email communication with AWS SES instead of Braze

• Decide and execute when guest token should be removed, so no other order can be made with that token to guarantee anonymity

• Prevent error appearing on the success page due to loyalty account request and price call

• Review the tracking event coverage and naming conventions

• QA Testing

01 Nov 2023

• Create a new static page for guest terms and conditions and link it in the flow

• Change copy to “choose payment' instead of “add payment” at the /cart/payment page
  

  

• Save Card Option Removed at the Payment step

  

• CTA Button Adjustment - Sign in/ up more prominent:

Image Added

• Remove Favorite option for guest users:

Image Added

• Implement tracking events to flow to Amplitude

• E2E QA Testing

22 Nov 2023

I am passing on an inherited legal requirements document just to verify that everything stated there has been recorded correctly and nothing is missing.

/wiki/spaces/TRX/pages/4267018713

Information on the user-related data we are storing and what tools have access to it. Please consider the attached file and let me know if your team has any concerns. I am still collecting more information on how the Snowflake data is currently used. I know that we must pass on the transactional information there, but I'm not yet clear on what are the other analysis run using this data. Please let me know if your legal team would like to provide some input here.

We also wanted to consult whether the following case is acceptable from the legal perspective:

At the beginning of the mobile ordering flow a user needs to input the delivery address. That address gets passed onto the cart step if their selected service mode is delivery. Once a user enters the cart step, that's when they'll have to decide whether they want to check out as a guest or sign in/register. Also, in order to display an estimated delivery fee, we are sending this address data to our aggregators in order to provide a quote. Additionally, we are storing this information in our database in the order entry.

• Store locator (user inputs delivery address)

• Cart step (delivery price is calculated, user decides whether to checkout as a guest or register/sign-in)

Question: May we pass the address data to the aggregators and store it in our database before a user decides whether they wish to be a guest or sign in and before they place an order? Are we allowed to use this data for the purpose of providing a delivery fee quote?If that's problematic, we can simply decide not to disclose the delivery quote at this step and redirect them again to the cart page with provided pricing after a user selects "Continue as a Guest" and agrees to the required terms and policies. However, this will add an additional step of "returning to the cart", which we had initially eliminated in the Guest Checkout flow. Please see the flow below and let me know your thoughts. We can also jump on a call to review this if that's helpful.

Confirmation to link only the data privacy policy not any other terms in the modal? What about the terms of sale?

Continue as Guest button

Image Removed

Image Added