What is first-party data? Definition and examples for stores
First-party data is information your business collects directly from its own customers and visitors, through your own website, app, physical store or other direct interactions. Google's advertising policies describe it as customer information shared directly with you by the customer.
Examples in an online store
- Account and order details: email address, name, shipping address, order history.
- On-site behavior: products viewed, searches, carts, purchases.
- Newsletter sign-ups, survey answers and customer-service conversations.
- Offline data you record yourself, such as in-store purchases or phone orders.
By contrast, third-party data is collected by another company that has no direct relationship with the person, and then sold or shared. Second-party data is another company's first-party data shared with you directly, for example by a retail partner.
Why it matters
- Accuracy. It comes from real interactions with your store, so it reflects your own customers rather than a modeled audience.
- Analysis. Order history is the raw material for cohort analysis, RFM segmentation and lifetime value.
- Advertising. Ad platforms let advertisers upload customer lists for matching; Google's Customer Match rules say that, apart from brands selling through retailers, advertisers may only upload first-party data. Server-side tracking also sends conversions from your own systems rather than relying only on browser tags.
Privacy and consent
Collecting data yourself does not remove privacy obligations. Under the EU's GDPR, any processing of personal data needs a legal basis. Article 6 lists six: consent, performance of a contract, a legal obligation, vital interests, a public task, and legitimate interests. Using an address to ship an order may rest on the contract; using the same address for marketing may need consent, depending on the country and the channel. Cookies and similar tracking on your site fall under a separate EU rule, Article 5(3) of the ePrivacy Directive, which is where a consent banner and Consent Mode come in.
CIQRA sends server-side conversions to GA4, Meta, TikTok, Google Ads, Pinterest, Snapchat and Microsoft, and includes cookie consent on every plan.
Common mistakes
- Collecting more than you use: every field you store is a field you must protect.
- Letting data scatter across tools with no single customer record.
- Treating "first-party" as meaning "consent not needed".