If you have ever bought anything online from a major ecommerce site like Amazon.com you will probably have noticed the https:// at the beginning of the URL when you either first entered the site or when you were about to enter your credit card number. This protocol, better known as SSL allows your machine and the receiving web site to receive your data in an encrypted form so that "people with bad intentions" do not grab your personal information as it travels the web. While this is a first good step in building trust with customers, it is only the beginning when it comes to a business establishing itself as an entity that truly cares about privacy and the protection of their customers' data.
A business will never build customer loyalty without first building trust, and as the old saying goes, you can spend a lifetime building trust to only have it evaporate by doing one wrong act. In the ecommerce world, the chain of trust must extend from a company's privacy policy, through their web site login all the way to the emails that customers receive from the company in their inbox.

Last week my wife convinced me to order Qdoba for the family. Being that she is from Houston, Mexican is always at the top of her list. While Qdoba is certainly not the best we have ever tasted, considering the area of the country we live in, it will make do, when she is really having a taste for the southwest. It had been years since I had been in a Qdoba so the first thing I investigated was seeing if they had a menu online. To my glee, they not only had a menu online, but they also offered online ordering.
I am a huge fan of online ordering, because it gives customers yet another vehicle to interact with a company. For control freaks like me, online ordering means being able to control exactly what you want and not hoping a person on the other end of the phone, wrote your order down correctly; or even worse, going through the drive-thru and making bets with your family on whether they'll get the order right. Online ordering gives you a written record of exactly what you entered and while not foolproof, it takes the auditory mishaps out of the equation giving the business a better chance at fulfilling customers' needs.
In order to place my scrumptious Qdoba order I first had to register for an account and wait for an email so that I could log back in to place my order - okay, no problem, pretty standard stuff. Unfortunately, to my great dismay, when I received my Qdoba registration confirmation email, it not only had my login email address in plain text, but also the password. Sure, my credentials for Qdoba is not the same as sending my banking info via email in plain text, but I was highly disappointed in Qdoba for not truncating or hiding my password completely like most sites now do. When it comes to small businesses that I consult, I can always give them a little more slack - they didn't know, they don't have a professional web developer, they don't have the budget, etc. There are hundreds of excuses I could use to let it go for the small guys. But when I see a national player that makes this type of amateur mistake, it really makes me lose confidence in wanting to give them my credit card. While they did use SSL throughout the ordering and checkout process, the fact that anyone who intercepted my email could see my password was frustrating, even more so, because it was a password that I use for other sites I visit on the net. This is a perfect example on the vulnerability many consumers have on the web, because one site does not take the simple task of obscuring your password on your registration email.
Building trust is more than just using https and I hope Qdoba quickly changes this practice. For the record, I went back and started looking at web sites I had registered at over the past 6 months to see if I could find other violators. The video chat site ooVoo.com was another culprit. My advice to businesses - always obscure the passwords to user accounts when sending information via email; especially when it's not a password recovery situation and the person is truly locked out. My advice to consumers - when you receive an email with your username and password, don't be shy about complaining to the company and then change your password immediately; hopefully they won't send the new one via email too :-)