Privacy Policy

When you interact with Shopify Pro Services — through our website, contact forms, email, or discovery calls — we may collect the following information:

Information You Provide Directly

• Full name — when you fill in a contact or audit request form
• Email address — for communication, project updates, and marketing (with your consent)
• Phone number — when provided for call bookings or WhatsApp communication
• Business and store details — such as your Shopify store URL, niche, and monthly revenue range
• Payment information — processed securely via Stripe; we never store card details directly
• Project brief and messages — content shared through enquiry forms or email

Information Collected Automatically

• IP address and device information — browser type, operating system, screen resolution
• Pages visited and time spent — via Google Analytics and Microsoft Clarity
• Referral source — how you found our website (e.g. Google search, social media)
• Cookie data — see Section 3 for full cookie details

We use the information we collect for the following purposes:

• Service delivery — to fulfil your project, send proposals, and communicate about ongoing work
• Free store audits — to analyse your Shopify store and deliver personalised video feedback
• Booking confirmations — to confirm and manage strategy call appointments
• Invoicing and payments — to process transactions and send receipts securely
• Marketing emails — only where you have explicitly opted in; you can unsubscribe at any time
• Website improvement — to understand how visitors use our site so we can improve it
• Legal compliance — to fulfil any obligations required under UK and EU law

We will never use your personal data for purposes beyond those listed above without obtaining your explicit consent first.

Our website uses cookies — small text files stored on your device — to improve your experience and help us understand how the site is used. Here is a breakdown of the cookies we use:

How to Manage or Opt Out of Cookies

You can control or delete cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the site. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

We work with trusted third-party platforms to operate our business. Each of these services has their own privacy policy and data practices:

• Shopify — our ecommerce platform partner. Shopify Privacy Policy
• Google Analytics & Search Console — website traffic analysis and SEO performance tracking
• Meta (Facebook/Instagram) Pixel — ad campaign tracking and retargeting
• Stripe — secure payment processing. Stripe Privacy Policy
• Calendly — appointment scheduling for strategy calls
• Klaviyo / Mailchimp — email marketing automation (only for opted-in subscribers)
• Microsoft Clarity — anonymised heatmap and session recording tool

We never sell your personal data to any third party. Data shared with the above services is limited to what is necessary for the specific function they provide.

We take data security seriously. The following measures are in place to protect your personal information:

• SSL encryption — all data transmitted via our website is encrypted using HTTPS/TLS
• Secure payment processing — all payments are handled by Stripe; we never store card details on our servers
• Access controls — only authorised team members with a legitimate need can access client data
• Regular security reviews — we periodically audit our systems and third-party tools
• Data minimisation — we only collect what we actually need; nothing more

In the unlikely event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours, as required by UK GDPR.

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

• Right to Access — request a copy of the personal data we hold about you
• Right to Rectification — request that we correct any inaccurate or incomplete data
• Right to Erasure — also known as the "right to be forgotten" — request deletion of your data
• Right to Restrict Processing — request that we limit how we use your data
• Right to Data Portability — receive your data in a structured, machine-readable format
• Right to Object — object to us processing your data for marketing or legitimate interest purposes
• Right to Withdraw Consent — withdraw previously given consent at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been mishandled.

We only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements:

• Client project data — retained for 7 years for legal and accounting purposes
• Enquiry and audit form data — retained for 12 months, then securely deleted
• Email marketing subscribers — retained until you unsubscribe or request deletion
• Analytics data — aggregated data retained for up to 26 months via Google Analytics

When your data is no longer required, it is deleted or anonymised securely.

Our services are intended for business owners and are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has submitted personal data, we will delete it immediately. If you believe this has occurred, please contact us at [email protected].

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this page periodically.

For significant changes that affect how we use your data, we will notify active clients and subscribers via email before the changes take effect.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, we are here to help. We aim to respond to all privacy enquiries within 3 business days.