We collect the minimum data we need to do the work you've asked us to do, and we tell you exactly what that is. This policy describes the personal data we process, why, and what rights you have over it.
shopifywebdeveloper.co.uk is operated by a UK-registered business based in London. For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller for personal data submitted through this website.
Our Data Protection Officer can be reached at dpo@shopifywebdeveloper.co.uk.
We collect personal data in three contexts:
When you submit a form (contact, free audit, brief), we collect: name, email, company name, role, store URL, brief content, plus any service / tier / budget selections you make. This data is sent to us for the purpose of responding to your enquiry.
If we have analytics enabled, we use privacy-respecting tools (Plausible Analytics by default; optionally Microsoft Clarity for heatmaps). These collect anonymised page-view data, referrer, country-level location, and device class. They do not use cross-site tracking cookies and do not identify you personally.
Our hosting provider records standard request logs (IP address, timestamp, requested URL, user agent) for security and abuse prevention. These are kept for 30 days then deleted.
We do not use your data for behavioural advertising, profiling, or automated decision-making.
We rely on the following lawful bases under UK GDPR:
| Activity | Lawful basis |
|---|---|
| Responding to your enquiry | Article 6(1)(b) — necessary to take steps prior to entering into a contract |
| Site analytics (anonymised) | Article 6(1)(f) — legitimate interests (improving the service) |
| Server logs (security) | Article 6(1)(f) — legitimate interests (preventing abuse) |
We share personal data only with processors who help us deliver the service. Each operates under a written data processing agreement. Current processors:
| Processor | Purpose |
|---|---|
| Hosting provider (Vercel / Cloudflare) | Serving the site |
| Form delivery (Resend / Formspree, where configured) | Delivering form submissions to our inbox |
| Plausible Analytics | Anonymised site analytics (EU-hosted) |
| Microsoft Clarity (optional) | Heatmap analysis |
We do not sell, rent, or trade personal data. We disclose data to law enforcement only when required by valid legal process.
Data we process is held in the UK or the EU/EEA where possible. Where a processor is based outside the UK/EEA (e.g. Microsoft Clarity, US-based), the transfer is governed by the UK International Data Transfer Agreement or equivalent safeguards. A list of current processors and their locations is available on request.
Under UK GDPR you have the right to:
To exercise any of these rights, email dpo@shopifywebdeveloper.co.uk. We respond within 30 days (typically 5 working days). There is no charge for the first request.
We do not set tracking cookies. The site uses:
See our Cookie Policy for the full list.
Material changes are reflected in the effective date at the top of this page. We do not email you when the policy changes; the canonical version is always here.
For privacy-specific matters: dpo@shopifywebdeveloper.co.uk.
For general matters: hello@shopifywebdeveloper.co.uk.
If we don't resolve your concern, you have the right to complain to the UK Information Commissioner: ico.org.uk/make-a-complaint.