> Why not use the details provided by Paypal, which include a billing
> address and unique customer ID? That's how most places I buy from
> on-line work. Yes, there's the opportunity to set up an account, if I
> want to have a record of past transactions, emails about things
> related to what I've bought in the past, and so on, but it's rarely
I prefer to keep those separate, but this is a good fallback scenario.
> I don't know Drupal, so can't tell you how in detail to do this, but
> since Paypal is handing you the information, Drupal must be able to
> get hold of it and process it.
> In fact, you're potentially hitting legal issues - if you take
> personal details (like an address), you're only allowed to retain it
> for as long as required by the purposes for which you've asked for
> it. If you only need it to send that one order, then you're only
> allowed to retain it for the length of time it takes to process that
Spot on! Ebook purchases typically garantee unlimited future access to the goods, so that part of the order never concludes. That should not require more than an e-mail loop and/or security question, and the user's permission.
Powered by hypermail