1. Introduction
This Privacy Policy explains how The Shopify Workshop (“we”, “us”, “our”, or the “Company”) collects, uses, stores, and protects your personal information when you visit our website at theshopifyworkshop.com (the “Website”) or engage with our services. We are committed to protecting your privacy and handling your data in an open and transparent manner, in line with applicable data protection laws including the UK GDPR, the EU GDPR, and other relevant regulations.
By using our Website or submitting your information through any of our forms, you agree to the practices described in this Policy.
2. Who We Are
For the purposes of data protection law, The Shopify Workshop is the “data controller” responsible for your personal data. If you have any questions about this Policy or how we handle your information, you can reach us using the details in the “Contact Us” section below.
3. Information We Collect
We only collect information that we need to respond to your enquiries and provide our services. This may include:
- Contact and enquiry details you submit through our contact form, quote popup, or service-inquiry form — such as your name, email address, phone/mobile number, subject, message, and (where provided) company name, website URL, or uploaded files.
- Communication records from emails, WhatsApp messages, or calls exchanged with us.
- Technical data such as your IP address, browser type, device information, and the pages you visit, collected automatically through cookies and analytics tools.
- Project data that a client shares with us to deliver services, which may include access credentials or business information (handled confidentially).
We do not intentionally collect sensitive personal data, and we ask that you do not submit it through our forms.
4. How We Use Your Information
We use the information we collect to:
- Respond to your enquiries, quote requests, and messages.
- Provide, manage, and improve our services.
- Send project updates, proposals, and service-related communications.
- Maintain records of enquiries and leads for follow-up.
- Protect our Website against spam, fraud, and abuse.
- Analyse Website performance and improve user experience.
- Comply with our legal and regulatory obligations.
We do not sell your personal data to third parties, and we do not send marketing emails unless you have expressly opted in.
5. Legal Bases for Processing
Where data protection law applies, we rely on the following legal bases to process your personal data:
- Consent — when you submit a form or agree to our use of cookies.
- Legitimate interests — to respond to enquiries, run and secure our Website, and grow our business in a way that does not override your rights.
- Contract — where processing is necessary to provide services you have engaged us for.
- Legal obligation — where we are required to retain or disclose data by law.
6. Forms and Enquiries
When you submit any form on our Website, we collect the details you provide together with your IP address and browser information to help detect spam. Submissions are stored securely as enquiry records and are also emailed to our team so we can respond. To reduce spam, our forms use a math verification check and Google reCAPTCHA (see “Third-Party Services” below).
7. Cookies and Tracking Technologies
Our Website uses cookies and similar technologies to make the site work, remember your preferences, and understand how visitors use our pages. Cookies are small text files stored on your device. We use:
- Essential cookies — required for the Website to function correctly.
- Analytics cookies — to measure traffic and improve performance.
- Third-party cookies — set by services such as Google Analytics and reCAPTCHA.
You can control or disable cookies through your browser settings. Please note that blocking some cookies may affect how the Website functions.
8. Analytics
We use analytics tools such as Google Analytics to collect anonymised information about how visitors interact with our Website — for example, pages viewed, time on site, and general location. This helps us improve our content and services. Analytics data is aggregated and does not directly identify you. For more information, see Google’s Privacy Policy at policies.google.com/privacy.
9. Third-Party Services
We rely on trusted third-party services to operate our Website and deliver our work. These may include:
- Google reCAPTCHA — to protect our forms from spam and abuse (subject to Google’s Privacy Policy and Terms).
- Google Analytics — for Website usage insights.
- Email and hosting providers — to deliver notifications and host the Website.
- Communication tools — such as WhatsApp, if you choose to contact us through them.
These providers process data under their own privacy policies. We only share the minimum information necessary and never sell your data.
10. How We Share Your Data
We do not sell, rent, or trade your personal information. We may share it only in limited circumstances:
- With service providers who help us operate the Website and respond to enquiries.
- Where required to comply with a legal obligation, court order, or lawful request.
- To protect our rights, property, or the safety of others.
11. Data Retention
We keep personal data only for as long as necessary for the purposes described in this Policy. Enquiry and lead records are retained so we can respond to and follow up on your request, and for our legitimate business and record-keeping needs. When data is no longer required, we securely delete or anonymise it, unless we are legally required to keep it.
12. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
13. International Data Transfers
As we work with clients and service providers around the world, your information may be processed or stored in countries outside your own. Where data is transferred internationally, we take steps to ensure it is protected in line with applicable data protection laws.
14. Your Data Protection Rights
Depending on your location, you may have the following rights over your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — request that we delete your data, subject to any legal obligations.
- Restriction — ask us to limit how we use your data.
- Objection — object to processing based on our legitimate interests.
- Portability — request your data in a portable format.
- Withdraw consent — where processing is based on consent.
To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.
15. Children’s Privacy
Our Website and services are not directed at children, and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will remove it.
16. Links to Other Websites
Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites, and we encourage you to review their privacy policies before providing any personal information.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this Policy periodically.
18. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
- The Shopify Workshop
- Email: info@theshopifyworkshop.com
- Phone: +91 8200341428
- Website: theshopifyworkshop.com/contact