Published Last updated Written and reviewed by the Resale Intelligence team
Customers' ID number, phone, email, birth date and address are partly hidden. People with the permission can reveal them; every reveal goes in the audit log.
- Who can do this:
- Owner, Store Admin, Manager, Privacy Officer (role defaults; the owner can change them)
By default, the system shows a customer's national ID, phone, email, date of birth and address partly hidden. People with the permission can reveal them in full, and every reveal records who looked and when.
What is hidden
| Data | Shown as |
|---|---|
| National ID number | Only the last digits |
| Phone number | Only the last digits |
| Email and date of birth | Fully hidden |
| Address | Not shown until revealed |
Printed purchase vouchers also show the seller's ID number partly hidden. A company's tax ID is always shown in full.
Reveal the full details
Open the customer's page from Customers.
On the Customer details card, tap Show full details.
Use only what you need, then leave the page.
The full details show only on that page view. When you open the page again, they are hidden again.
Who can reveal
You need the View sensitive data (ID number/address) permission, held by default by: Owner, Store Admin, Manager, Privacy Officer. It is a sensitive permission, so anyone given it individually must turn on 2FA.
People without it don't see Show full details and can't change the ID number, date of birth or contact details on the customer edit page.
How reveals are recorded
-
Every tap on Show full details writes a
customer.pii_viewedevent in the audit log, with who looked, when and from which device. -
Opening the customer edit page with this permission is recorded too, because that page shows the full details.
-
The owner, or anyone allowed to view the audit log, can search for this event. See Audit log: who did what, and when.