Social Service
Part of Social commerce customer service
Keeping private order details out of public comments
Avoid exposing order details in social comments and respond carefully when a customer has already posted private information.
A public reply to an order problem should not reveal information about the customer’s purchase. Do not request an address, phone number, receipt, payment detail or full order number in a comment. Do not repeat those details if the customer posts them first.
Acknowledge the concern, offer a genuine support route and deal promptly with any information already exposed.
Set the boundary early
Tell the customer how to reach the retailer through a contact option they can find independently, and ask them not to post personal or payment details in the thread. Check that the route is accessible and monitored.
Avoid publicly confirming a customer’s address, purchase, parcel location or payment method. Even a partial detail can disclose information when combined with the public post. The thread needs enough information to show that the concern has been heard and where the customer can obtain individual help.
Handle details already posted
Treat the exposure separately from the order complaint. Do not repeat the information in a reply. Use the platform controls available to reduce its public visibility where appropriate, and follow the retailer’s privacy or security process.
Keep the facts needed for the support case in the approved system rather than in personal screenshots or an unnecessarily broad notification.
Do not remove a complaint merely because it is negative. Where the comment itself exposes private details, assess moderation for that reason while preserving a route to resolve the complaint.
The response depends on what was exposed, who may still see it and which controls the platform actually provides. Hiding or deleting a comment does not guarantee that copies or notifications elsewhere have disappeared.
Limit details in support
Once the customer reaches support, request only what is needed to locate and assess the order. Verify the customer before disclosing order information, limit staff access to the case and follow the retailer’s retention rules.
As a general practice, businesses should not share customers’ personal information on public social channels. For organisations covered by the Australian Privacy Principles, OAIC guidance says personal information may only be collected where it is reasonably necessary for the organisation’s functions or activities, and refers to handling access and correction requests.
Privacy Act coverage varies, but keeping unnecessary customer details out of public comments is a sensible practice for every retailer.
Key privacy principles from the OAIC for handling personal information
- Collection must be reasonably necessaryYes – under Australian Privacy Principles
- Access and correction requests must be handledRequired for APPI-covered organisations
- Personal info should not be shared on public social channelsRecommended best practice
