Quantcast StorefrontBacktalk » Blog Archive » Do Invite-Only Web Sales Make Long-Term Sense?
advertisement
advertisement

Do Invite-Only Web Sales Make Long-Term Sense?

Written by Evan Schuman
November 12th, 2009
Like this story? Share it
To share this story with people in your social network, please click on the network icons below.

Saks this month has been testing the latest Web fad: invitation-only Web events. But the very nature of the Web makes such events easy and practical only so long as they are gimmicky and ultra-lenient. Retailers that truly want to hold events where only a select few have access need to prepare for extensive authentication, which might mean locking out the friends of an invitee and potentially offending those who are blocked. It’s a marketing experiment that brings honest-to-goodness risks right along with those very-real rewards.

The easy path is to be very lenient. Offer access to anyone receiving the E-mail announcing the event. If that person posts the URL and perhaps the password—for that one event—on Facebook, Twitter and LinkedIn accounts, let it happen. So the audience is somewhat diluted. If those others buy stuff while attending the event, what’s the harm?

The intent of an invite-only event, however, is to be able to control the attendees, perhaps to reward excellent customers. More likely, though, the invite-only approach is to lure a very lucrative small subset of your audience to a virtual gathering where you can flood those people with highly targeted promotions. Maybe a key supplier wants to pay you for access to that subgroup?

If those issues are key, then you’ll want to strictly manage access. To supplement the obscure URL and password, perhaps an IP address verification? Or maybe tell attendees that the password can only admit one person, so sharing it will defeat the customer’s purpose. (Unless they choose to not go and to give it to a non-targeted friend.)

Once you have cleared those authentication issues, the psychological and marketing benefits are substantial. Such invites—if strictly managed—suggest exclusiveness and prestige. Managed correctly, this approach could be a powerful way to sell higher end items.

But from a CRM standpoint, this is a gold datamine. You already presumably know exactly who is in the room and precisely what they’re looking at. Because they’ve signed in, they’re more likely to stay longer; they’ve already lost their anonymity.


advertisement

Leave a Reply

Newsletter

Quickly catch-up on the latest in E-Commerce and Retail Tech with our free weekly newsletter, with urgent bulletins as news merits.
advertisement

Most Recent Comments

Kill All The Passwords

This article does mention, but does not give enough attention to, the fact that the attacks discussed are only feasible when the encrypted password file can be copied and subjected to an offline attack. The trick is to have authentication performed on a separate, much more strongly secured host - such as an Active Directory Domain Controller, or a Kerberos server, or a NIS+ server, or even using something as banal as an LDAP-over-SSL authentication dialog. In these environments, the odds of the "password file" being stolen and subjected to an offline attack go to near zero, and only online attacks may be carried out by the attacker. With sensible exponential backoff between failed password attempts, lockout after a modest number of failed attempts on a single account, and pattern detection, that minimum 7 character password is quite secure enough. Passwords aren't dead yet for security purposes, and they will be with us for a very long while to come for practical purposes. The trick is to employ them correctly. Read more...
The possibilities you describe are years away from being implemented at best, so for the moment passwords are an ugly reality. Luckily, password managers can easily manage hundreds of passwords of any length. The only thing a user needs to remember is the master password. It seems like an easier task to educate users on how to use password managers rather than implement complex security technology on a global basis. Read more...