Privacy Policy

01Who is responsible

Shopision LLC, a limited liability company registered in Wyoming, USA, is responsible for (the “controller” of) the personal data described here. Email support@shopision.com for anything on this page.

This policy covers our website, our checkout, our client area and our services. It does not cover your own Shopify store, which has its own privacy policy for your customers.

02What you give us

• Contact details: your name, email address, business name and store address, when you buy, ask for a quote, fill in a form or write to us. Purpose: to reply, deliver and keep a record of the work.
• Briefs, messages and files you send: purpose, to do the work you asked for.
• Account details for the client area: your sign-in email and the history of your requests, deliveries and invoices. Purpose: to run your account.
• Billing details: taken by our payment processors, such as Stripe. We receive a record that a payment succeeded, the amount, the billing country, and the card brand and last four digits. We never receive or store your full card number. Purpose: to take payment and keep the records tax law requires.

03What is collected automatically

• Server and security logs: IP address, browser, the pages requested and the time. Purpose: to keep the site secure, stop abuse and fix errors.
• Your country, read from your connection, so prices can be shown in your currency. It is not stored with your name.
• Visit records in our own database: which page was viewed, the referring page and any campaign tags in the link, linked to a random visitor number held in a cookie. Purpose: to count visits, see which pages lead to an order, and credit a referral. These records are not shared with anyone and not used for advertising.

No page on this site loads a third-party analytics service, a tag manager, an advertising pixel or a session recorder. There is no Google Analytics, no Meta pixel and no cross-site tracking here. We do not buy personal data, we do not sell or rent it, and we do not share it for anyone's targeted advertising.

04Data we see inside your store

While working in your store we may see personal data about your customers, such as names, addresses and orders. For that data you are the controller and we act only on your instructions, as your processor or service provider.

We open that data only when the task needs it, never copy it out of Shopify unless the task requires it (for example a migration), never use it for our own purposes, and delete any copy when the task ends. A data processing agreement is available on request.

05How we use it

• To deliver the tasks, projects, subscriptions and products you buy, and to talk to you about them.
• To take payment, prevent fraud and keep accounting and tax records.
• To keep the site, the client area and your account secure and working.
• To send service messages about your account, orders and work. These are not optional while you are a client.
• To send news or offers only if you asked for them; every such email carries an unsubscribe link that works.
• To meet legal obligations and to establish or defend legal claims.

We do not make decisions about you by automated means that have legal or similarly significant effects.

06Legal bases (UK and EEA)

If you are in the United Kingdom or the European Economic Area, we rely on:

• contract: to provide what you bought or asked for, and to take steps you request before buying;
• legal obligation: to keep tax and accounting records and answer lawful requests;
• legitimate interests: to secure the service, prevent fraud, count visits to our own site and improve it, and keep records of our work, balanced against your rights;
• consent: for marketing email, which you can withdraw at any time.

07Who else processes it

A short list of providers, each bound by contract to use the data only to provide their service to us:

• Payment processors, such as Stripe: card payments, subscriptions and fraud checks.
• Hosting and network: our servers are hosted by Leaseweb, with Cloudflare in front of them as the content delivery and security network that handles requests to the site.
• Email delivery: Resend, which sends our account and service emails.
• File storage: Cloudflare R2, holding files uploaded to the client area and to deliveries.
• Shopify: where you grant us collaborator access to your own store.

If a provider changes, this list is updated. We share personal data with anyone else only if the law requires it, to protect our rights or someone's safety, or as part of a sale or reorganisation of our business, where the buyer is bound by this policy. We would tell you of a legal demand unless barred from doing so.

08Store access and credentials

• We ask for a Shopify collaborator account, never your password. If you send a password anyway, we do not use it, we delete it, and we ask you to change it.
• We ask for the fewest permissions the task needs, and the narrowest role a third-party app offers.
• Access is used only by the people doing your task.
• We do not store access keys or codes outside our platform, and never in email threads or personal notes.
• Revoke our access when the task is delivered; we confirm when we no longer need it.

09Cookies and browser storage

We use only first-party cookies, set by our own site, and no advertising or third-party analytics cookies:

• a visit cookie holding a random number, kept for up to a year, so visits and orders can be counted without knowing who you are;
• a split-test cookie, only while we are comparing two versions of a page, so you keep seeing the same one (up to 90 days);
• a referral cookie, only if you arrived through a referral link, so the referrer is credited (7 days);
• a sign-in cookie in the client area, which keeps you signed in and is necessary for it to work.

If you fill in a form, your browser may remember your name, email and phone on your device so the next step can fill them in for you; it is stored in your browser, not sent anywhere else. Our payment processor and our network provider may set strictly necessary cookies of their own for fraud prevention and security.

You can block or delete cookies in your browser settings. Blocking the sign-in cookie stops the client area from working; blocking the others does not affect the service.

10International transfers

We are based in USA, and our providers may process data there and in other countries. Where personal data leaves the United Kingdom or the European Economic Area, we rely on the safeguards that law provides, such as the standard contractual clauses or an adequacy decision. You can ask us for a copy of the safeguard that applies.

11How long we keep it

• Briefs, deliveries and messages: while you are a client and for two years after, so we can answer a question about past work.
• Billing and tax records: as long as tax and accounting law requires, usually up to seven years.
• Visit records: up to 24 months.
• Server and security logs: a few weeks, unless needed to investigate an incident.
• Marketing preferences: until you unsubscribe, after which we keep only what is needed to respect it.

When data is no longer needed it is deleted or made anonymous. Ask us to delete it sooner and we will, except where the law requires us to keep it.

12Security and breaches

Connections to the site are encrypted, access to client data is limited to the people doing the work, sign-in is protected, and store access follows the rules above. No system is perfectly secure, and we cannot promise that data will never be accessed without permission.

If a breach affects your personal data, we notify the relevant authority and you without undue delay and within the time the law sets, and tell you what happened and what we are doing about it. If it affects data from your store, we tell you promptly so you can meet your own obligations.

13Your rights

Wherever you live, you can ask us to tell you what we hold about you, give you a copy, correct it or delete it, and stop marketing to you.

In the United Kingdom and the European Economic Area you also have the right to restrict or object to processing, to data portability, to withdraw consent at any time, and to complain to your data protection authority. We would like the chance to help first.

If you are a California resident, you have the right to know what personal information we collect, use and disclose, to have it deleted or corrected, and not to be treated differently for using these rights. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. You may use an authorised agent.

Residents of other places, including other US states, have the rights their law gives them, and we honour them.

14Making a request

Email support@shopision.com. We acknowledge your request promptly and complete it within 30 days. If the law allows more time for a complex request, we tell you why within those 30 days. We may need to confirm who you are before acting, and we ask only for what that needs.

There is no charge, and we will not treat you differently for asking. If you disagree with our answer, you may appeal by replying to it, and we review the decision.

15Children

Our services are for businesses. They are not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe we have, tell us and we will delete it.

16Changes to this policy

The date at the top shows when this policy last changed. A material change is notified by email to clients before it takes effect, and the previous version is available on request.

17Contact

Shopision LLC, registered in Wyoming, USA. Email support@shopision.com. Our registered address is printed at the top of this page.