The Shopify Workshop ("we", "us", "our") operates the website at theshopifyworkshop.com/. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or enquire about our services. Please read this policy carefully.
1. Information We Collect
Information You Provide Directly
When you complete a contact form, enquiry form, or audit request on our website, we collect:
- Your name and email address
- Your Shopify store URL (optional, provided voluntarily)
- Project details and messages you send us
- Budget range and service preferences
Information Collected Automatically
When you visit our website, we automatically collect certain technical information, including:
- IP address (anonymised where possible)
- Browser type and version
- Pages visited and time spent on each page
- Referring URL and device type
This information is collected via Google Analytics 4 and LiteSpeed server logs. We do not sell or rent this data to third parties.
2. How We Use Your Information
We use the information we collect to:
- Respond to your enquiries and send project proposals
- Deliver the Shopify services you have requested
- Send you a confirmation email after form submission
- Improve our website, services, and user experience
- Analyse traffic and usage patterns using aggregated, anonymised data
- Prevent spam and fraudulent form submissions
- Comply with legal obligations
We will never use your information for unsolicited marketing without your explicit consent.
3. Sharing Your Information
We do not sell, trade, or rent your personal information. We may share data only in the following limited circumstances:
- Service providers: We use trusted third-party tools (listed in Section 8) to operate our website and business. These providers are contractually bound to handle your data securely and only for the purpose we specify.
- Legal requirements: We may disclose your information if required by law, court order, or to protect the rights and safety of our users.
- Business transfers: In the event of a merger or acquisition, user data may be transferred to the acquiring entity, subject to the same privacy protections.
4. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to enhance your experience:
| Cookie | Purpose | Duration |
|---|---|---|
| tsw_popup_shown | Prevents audit popup from appearing more than once per week | 7 days |
| _ga, _ga_* | Google Analytics — tracks page visits and behaviour (anonymised) | 2 years |
| _gid | Google Analytics — distinguishes users | 24 hours |
| wordpress_*, wp-settings-* | WordPress session cookies (admin only, not set for visitors) | Session |
You can control and delete cookies through your browser settings. Disabling cookies may affect certain site functionality. We do not use advertising or retargeting cookies.
5. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy:
- Contact form enquiries: retained for 2 years, then deleted or anonymised
- Active client project data: retained for the duration of the engagement plus 5 years for legal/accounting purposes
- Analytics data: retained for 14 months in Google Analytics (our setting), then automatically deleted
- Server access logs: retained for 30 days
You can request deletion of your data at any time (see Your Rights below).
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete data.
- Erasure: Request deletion of your personal data (the "right to be forgotten").
- Portability: Receive your data in a structured, machine-readable format.
- Restriction: Ask us to restrict processing of your data in certain circumstances.
- Objection: Object to processing of your data for direct marketing purposes.
To exercise any of these rights, please contact us at info@theshopifyworkshop.com. We will respond within 30 days.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption on all data transmitted between your browser and our server
- Rate limiting and honeypot protection on all contact forms
- Regular security updates to our WordPress installation and plugins
- Restricted admin access with strong authentication
- Data stored on servers located in secure, access-controlled data centres
While we take security seriously, no internet transmission is 100% secure. We cannot guarantee the absolute security of data transmitted to our site.
8. Third-Party Services
Our website uses the following third-party services that may collect or process your data:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Analytics 4 | Website traffic analysis (anonymised) | policies.google.com |
| Google Tag Manager | Tag management for analytics scripts | policies.google.com |
| Google Fonts | Loads Plus Jakarta Sans typeface | policies.google.com |
| Cloudflare / LiteSpeed | Hosting, CDN, and performance caching | cloudflare.com |
| WordPress.org | CMS powering this website | wordpress.org |
We are not responsible for the privacy practices of these third-party services. We encourage you to read their privacy policies.
9. Children's Privacy
Our services are intended for adults and business owners. We do not knowingly collect personal information from anyone under the age of 18. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. We will update the "Last updated" date at the top of this page. For significant changes, we may notify you by email if we hold your contact details.
Continued use of our website after any changes constitutes your acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us: