Privacy Policy

1. Information We Collect and Legal Basis

We collect the following categories of Personal Data based on the principle of necessity to deliver our service and only when we have a defined Legal Basis for processing (e.g., fulfilling a contract, legitimate interest, or consent).

1.1 Categories of Personal Data

• Identity & Contact Data: Full Name, Email Address, Contact Phone Number (optional).
• Service Specific Data: Basic store details required to set up your Shopify store (store name, niche, product preferences, brand colors, sample image/logo preferences). This data is essential for contract fulfillment.
• Transaction Data: Transaction ID, billing address (processed securely through PayPal or other PCI-compliant processors — we do not store full card details).
• Technical & Usage Data: IP address, browser type, operating system, time zone setting, location, and information on how you interact with our website (collected via cookies).
• Marketing & Communications Data: Your preferences in receiving marketing from us.

1.2 Aggregated Data

We may also collect and use Aggregated Data (e.g., statistical or demographic data). This data is derived from your Personal Data but is anonymized and does not directly reveal your identity.

2. How We Use Your Information

We use your information exclusively for the following purposes, based on the corresponding legal grounds:

• Service Provision & Fulfillment (Contract): To create, automate, and deliver your customized Shopify store as per our agreement.
• Order Management & Communication (Contract/Legal Obligation): To process payments, provide order confirmations, and manage the contractual relationship effectively.
• Customer Support & Troubleshooting (Contract/Legitimate Interest): To respond to your inquiries, provide support for the delivered store, and troubleshoot technical issues.
• Security and Fraud Prevention (Legitimate Interest): To protect our systems, website, and users from unauthorized access, misuse, or illegal activities.
• Marketing (Consent): To send promotional updates about our services, only where you have explicitly provided consent. You may withdraw this consent at any time.
• Service Improvement (Legitimate Interest): To analyze usage data to improve our automation processes, website functionality, and overall service experience.

3. Information Sharing

We **do not sell, rent, or trade** your personal information. Disclosure is limited to the following essential circumstances:

• Payment Processors: Information is processed by trusted, PCI DSS compliant providers (like PayPal) strictly for the purpose of completing your financial transaction. They act as independent data controllers for the payment part.
• Service Vendors: We share necessary data with third-party infrastructure and support providers (e.g., hosting, CRM) who are contracted to process data on our behalf under strict confidentiality agreements.
• Legal Obligations: When legally required by government authorities, regulators, or court order to comply with legal processes or protect our rights and safety.

4. Data Security and Retention

We implement robust administrative, technical, and physical safeguards to protect your Personal Data:

• Security Measures: Use of SSL/TLS encryption, restricted access control, and regular security audits.
• Data Retention: We retain contractual data for the duration of the service plus seven (7) years to comply with legal and accounting requirements. Data collected based solely on consent is retained until consent is withdrawn.
• International Transfers: If data is transferred outside your country of residence, we ensure appropriate safeguards (e.g., Standard Contractual Clauses) are in place to afford the data the same level of protection.

5. Cookies and Tracking Technologies

Our website uses cookies to distinguish you from other users, enhance functionality, and analyze performance. You have the option to accept or decline cookies through your browser settings. Declining essential cookies may impact service usability.

6. Your Data Protection Rights

You have explicit rights regarding your Personal Data, which you can exercise by contacting us:

• Right of Access: Request a copy of the specific Personal Data we hold about you.
• Right to Rectification: Request corrections to any incomplete or inaccurate information.
• Right to Erasure ('Right to be Forgotten'): Request the deletion of your account data and Personal Data (unless retention is required for legal or transaction verification purposes).
• Right to Object/Restrict Processing: Object to processing based on our legitimate interests or restrict use for direct marketing.
• Right to Data Portability: Request that your Personal Data be transferred to you or a third party in a structured format.

To exercise any of these rights, please contact us promptly at **[Insert Support Email Here]**. We will respond to all legitimate requests within one calendar month.

7. Changes to This Privacy Policy

We may update this policy periodically. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date.