customer_id or customer_email required