Security & privacy at BridgeSync
Sync your sales, stay compliant, and feel secure. We care deeply about data security and customer privacy. Our WooCommerce to bol.com connector follows strict security standards and meets GDPR requirements, so you can automate your business with peace of mind.
Core security principles
BridgeSync follows strong security principles to keep your data safe. These steps protect your information and lower the risk of breaches, so your data is always managed securely.
Least privilege
We only send bol.com the minimum data needed: inventory, prices, EANs, and invoices.
Rest assured, BridgeSync never stores or processes your payment card details.
BridgeSync uses OAuth 2.0 for secure user authentication.
Integrated with the official bol.com Retailer API v10.
Tokens are stored securely and automatically updated in your WordPress environment.
Strict admin permissions
Only authorised administrators can change plugin settings.
WordPress has built-in checks to protect admin pages.
Secure data processing and logging
Our security measures are designed to mitigate several key risks, including credential theft and data leakage. Understanding these threats helps clarify how our data flows are structured to counteract them.
Data flows
WooCommerce → bol.com:
Required data: products, inventory, pricing, and invoices.
bol.com → WooCommerce:
Includes the information needed for fulfilment (no private financial details).
Secure logging
Logs should only include necessary technical metadata, such as API responses, sync errors, request timestamps, status codes, and error messages.
Logs stay on your server and aren't shared.
Code security
Robust code security aligned with WordPress best practices and industry standards.
Input validation and sanitisation
All inputs are validated and sanitised in accordance with best WordPress practices.
Nonce and CSRF protection
AJAX requests and forms are protected with WordPress nonces to stop CSRF.
Licence security
Active license verification prevents unauthorized use.
Regular automatic re-verification keeps your license protection current.
Privacy by Design
Privacy is a top priority. Strict GDPR compliance is built in from the start.
User data
We do not pass your personal customer data to third parties beyond what is strictly required to communicate with bol.com.
GDPR compliance
We only process the data you need to perform the contract, and only for the legal basis of contract performance.
Additional security measures
It has extra layers of protection for maximum reliability.
| Measure and monitor | Description |
|---|---|
|
API endpoints are hardened.
|
Only admins with valid security tokens can access it.
|
|
Fallback processing
|
Automatic deferred jobs handle temporary bol.com API unavailability.
|
|
Debug logging
|
You can disable this for production in settings.
|