Simple Delivery with Click & Collect is revealing private seller's postcode

[porte2425]

eBay’s system seems to be confusing Evri Click & Collect with a local collection under the contact page, and thus revealing their postcode to anyone looking.

If you look at a private seller’s listing, where they are using Simple Delivery and have allowed Click & Collect, but have not enabled local collection, then everything seems okay (i.e. you can only see the item’s general location).

However, when you click "Contact seller", it is incorrectly stating "Postage and collection in person"; and thus revealing the postcode to anyone looking (obfuscated in the image).

When the seller has enabled Click & Collect but it is not SD postage, then it doesn’t appear to happen. Nor when it is SD postage but Click & Collect is disabled.

[marco@ebay]

Hi bramyyyy, thanks for your reply.

This is not a technical issue, this was related to account settings, which is why no further updates have been added here. However, as I said above, my reply above was only dedicated to the 2 people in this thread that shared their examples. You can try doing what I suggested above to see if fixes it.

@wellingnorth Since you didn't share an example, I wouldn't be able to confirm if the same is happening to your account. If it is the same, you can try doing the above to see if that works for you.

Thank you,

Marco

[porte2425]

With all due respect, marco@ebay , but your responses on this topic have not been any good.

Your last “solution” is no good – it is even unrelated – as I have already explained.

My first post points out the problem, and others have given examples / more information since (and continue to); and given clear enough details that even an trainee web developer should be able to follow to replicate the bug. Because this is a bug.

You are giving out sensitive personal data (for some, a postcode is their full address!), when you have no need to be doing so; and have probably been doing so since Simple Delivery was first rolled out. You need to fix this asap.

[wellingnorth]

---

marco@ebay wrote:

@wellingnorth Since you didn't share an example, I wouldn't be able to confirm if the same is happening to your account. If it is the same, you can try doing the above to see if that works for you.

---

Thanks for the reply marco@ebay , my point is really more of a general one, that whether we're talking about Evri Click & Collect orders OR Collection in person orders, the listing flow gives the impression that the item postcode is not shown on ebay - see the screenshot in post #17 where you set the item postcode, it clearly says "Postcode will not be visible on the listing"

Also if you look at this help page for "Collection in person"

https://www.ebay.co.uk/help/selling/posting-items/setting-postage-options/local-collection?id=4181

it says "Listings will only provide enough information for prospective buyers to establish how far away the item is."

So although (as per your reply) there is a setting that lets you turn this off for Evri Click & Collect orders, other information on the site gives the impression that the item postcode will not generally be displayed at all?

[wellingnorth]

Morning marco@ebay as it seems like you are saying this is not a technical issue and is an intended behaviour, I wonder do you have an internal contact dealing with privacy / data protection you could pass this on to please to double check this? As shown in the examples above I don't think any user listing an item would reasonably expect the postcode they enter to be visible to anyone viewing the listing. 

Or failing that is there an email address or contact form we could use directly to get in touch with ebay regarding privacy / data protection concerns?

[porte2425]

marco@ebay 

A month has now passed since advising you of this issue.

Can you confirm that this has been identified as a bug, and a solution is being worked on?

Otherwise, can you provide me with the contact details of the correct persons within eBay with whom to file an official data protection complaint.

If nothing is handled from your end, then I will contact the Information Commissioner's Office (ICO), and seek their advice, as I estimate a million or so private accounts must be affected by this mishandling of data by your organisation.

[jonatjonatjonat]

Here you go - contact ebays data protection officer