{"section":"tracks","requestedLocale":"en","requestedSlug":"personal-data","locale":"en","slug":"personal-data","path":"docs/en/tracks/vtex-modules-getting-started/data-and-privacy/personal-data.md","branch":"main","content":"Personal data or _Personally Identifiable Information_ (PII) is any information relating to a natural person that is capable of identifying them directly (such as name, ID number, and email address) or indirectly (such as IP addresses, physical addresses, and [cookies](https://vtex.com/us-en/trust/cookies-information/)).\n\nSensitive personal data is information related to ethnicity, religious beliefs, political opinion, trade union membership, health or sexual life, and genetic or biometric data. Misuse of this type of data can lead to severe harm or discriminatory treatment of the data subject.\n\n## Personal data processed by VTEX\n\nVTEX processes customers' personal data only when necessary, complying with the requirements of each platform module to carry out ecommerce operations. See below the list of personal data that VTEX may process:\n\n* Name\n* Email\n* IP address\n* Navigation information ([cookies](https://vtex.com/us-en/trust/cookies-information/))\n* Cart information\n* Order details and history\n* Delivery address\n* Identification number (when required by the country where the store operates)\n* Gift card history\n* Abandoned cart\n* [Conversation Tracker](/en/docs/tutorials/understanding-the-conversation-tracker) chat\n* Session passwords (encrypted)\n* Generated tokens\n\nThe data list above is described in the [Data Processing Addendum (DPA)](#data-processing-addendum-dpa).\n\nVTEX does not sell, monetize, enrich, or transfer any customer personal data to other companies.\n\n## Data minimization\n\nThe principle of data minimization refers to collecting, processing, and storing only the information strictly necessary to achieve a specific purpose. This principle makes it possible to limit the amount of personal data collected and retained, thus reducing the risks associated with excessive information processing.\n\nIn this sense, VTEX collects only the minimum amount of data necessary to process the orders received, which means only the personal data strictly necessary for ecommerce operations."}