INSIGHTS FOR BETTER E-COMMERCE
Practical Shopify ideas, growth strategies, and technical insights sent when they’re worth reading.
Privacy policy
Last updated: 13 September 2026
This Privacy Policy explains how MerchCrafter™ collects, uses, stores, and shares personal information when you visit our website, contact us, request a project, purchase a service, communicate with our team, or otherwise interact with our business.
The short version: We collect only the information reasonably required to operate MerchCrafter™, respond to enquiries, deliver projects, process transactions, support clients, and improve our website and services. We do not sell your personal information to advertisers.
1. Who We Are
MerchCrafter™ provides ecommerce and digital services including Shopify design and development, custom theme work, conversion optimization, SEO, print-on-demand services, ecommerce automation, product setup, maintenance, and related digital services.
For the purposes of applicable data-protection law, MerchCrafter™ may act as a data controller for information collected directly through our website, enquiries, purchases, and client relationships.
In some client projects, MerchCrafter™ may also process information on behalf of a client where that client determines why and how the information is used.
2. Information We Collect
The information we collect depends on how you interact with MerchCrafter™. This may include:
- Your name and business or company name
- Email address, telephone number, and other contact details
- Project enquiries, requirements, messages, and communication history
- Billing details, invoice information, and transaction references
- Information you provide through forms, email, messaging platforms, or consultation requests
- Shopify store URLs, project assets, and information required to deliver client work
- Technical information such as browser type, device type, IP address, and approximate location
- Website activity, page visits, referring pages, and interaction information
- Marketing preferences and communication choices
Important: Please do not send passwords or other highly sensitive credentials through ordinary email unless specifically required. Where platform access is needed, use secure access methods whenever available.
3. How We Collect Information
We may collect information in several ways:
- Directly from you — through forms, project requests, emails, messages, calls, purchases, and consultations
- Through our website — through cookies, analytics, and technical information
- Through client projects — when information is supplied to complete ecommerce work
- Through service providers — such as payment, ecommerce, hosting, analytics, or communication systems
4. How We Use Your Information
MerchCrafter™ may use personal information for purposes including:
- Responding to enquiries and project requests
- Preparing proposals, quotations, and project scopes
- Delivering Shopify, design, development, SEO, CRO, POD, automation, and related services
- Managing invoices, payments, and accounting records
- Providing client support and project communication
- Maintaining and improving our website and services
- Detecting fraud, abuse, security incidents, or unauthorized activity
- Complying with legal, tax, accounting, or regulatory obligations
- Sending service-related notices and important project communications
- Sending marketing communications where permitted by applicable law
5. Legal Bases for Processing
Where data-protection laws such as the GDPR or UK GDPR apply, MerchCrafter™ may rely on one or more lawful bases for processing personal information.
Contract
We may process information when necessary to provide a requested service, prepare a project, fulfil an agreement, or manage a client relationship.
Legitimate Interests
We may process information where reasonably necessary to operate and improve our business, communicate with clients, protect our systems, prevent misuse, and understand website performance.
Consent
In some situations, we may rely on your consent, including certain marketing or optional tracking activities.
Legal Obligations
We may retain or process information where required for accounting, taxation, compliance, legal claims, or other statutory obligations.
6. Cookies & Analytics
MerchCrafter™ may use cookies, pixels, and similar technologies to operate the website, remember settings, understand visitor behavior, and measure website performance.
Cookies may include:
- Essential cookies required for website functionality
- Security and authentication cookies
- Analytics cookies used to understand website activity
- Preference cookies used to remember certain settings
- Marketing or advertising cookies where applicable and permitted by law
Where consent is legally required for non-essential cookies, those technologies should only be activated in accordance with your consent choices.
7. Shopify & Other Service Providers
MerchCrafter™ uses third-party platforms and service providers to operate our business and deliver services.
These may include providers associated with:
- Shopify and ecommerce infrastructure
- Website hosting and technical infrastructure
- Payment processing
- Email and business communication
- Analytics and website-performance measurement
- Cloud storage and file collaboration
- Project-management and development tools
- Customer-support and communication tools
These providers may process information under their own privacy policies, terms, and applicable contractual arrangements.
8. Sharing Personal Information
MerchCrafter™ does not sell personal information to advertisers.
We may share information only where reasonably necessary, including with:
- Service providers supporting our website and operations
- Payment processors and financial institutions
- Professional advisers such as accountants or legal advisers where required
- Contractors or collaborators involved in delivering an agreed client project
- Authorities where disclosure is required by law
- Parties involved in a legitimate merger, restructuring, acquisition, or transfer of business assets
We aim to limit access to information to what is reasonably necessary for the relevant service or purpose.
9. International Data Transfers
MerchCrafter™ works with international clients and online service providers. As a result, personal information may sometimes be processed or stored outside the country where you are located.
Where legally required, appropriate safeguards may be used for international transfers, such as contractual protections, adequacy mechanisms, or other legally recognized transfer arrangements.
10. Data Retention
MerchCrafter™ retains personal information only for as long as reasonably necessary for the purpose for which it was collected or to meet legitimate business, legal, accounting, tax, or regulatory requirements.
Different categories of information may therefore be retained for different periods.
For example, invoices and transaction records may need to be retained longer than an ordinary project enquiry because of financial or legal obligations.
11. Data Security
MerchCrafter™ takes reasonable administrative, technical, and organizational measures intended to protect personal information against unauthorized access, misuse, loss, alteration, or disclosure.
However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
Client account access: Where we are granted access to a client's Shopify store, connected systems, or business tools, access should be limited to what is reasonably required to complete the agreed work.
12. Your Privacy Rights
Depending on your location and applicable data-protection law, you may have certain rights regarding your personal information.
These may include the right to:
- Request access to personal information we hold about you
- Ask us to correct inaccurate or incomplete information
- Request deletion of certain information
- Request restriction of certain processing
- Object to certain processing activities
- Withdraw consent where processing relies on consent
- Request data portability where applicable
- Opt out of direct marketing communications
- Submit a complaint to an appropriate data-protection authority where applicable
These rights are not absolute and may be subject to legal exceptions, verification requirements, or data-retention obligations.
13. Marketing Communications
MerchCrafter™ may send relevant business, service, or marketing communications where permitted by applicable law.
You may unsubscribe from marketing communications at any time by using an unsubscribe mechanism included in the communication or by contacting us directly.
Opting out of marketing does not prevent us from sending necessary project, transactional, billing, security, account, or service communications.
14. Children's Privacy
MerchCrafter™ services are primarily business-focused and are not intended to knowingly collect personal information from children who are not legally permitted to provide such information without appropriate consent.
If you believe a child has provided personal information to us improperly, please contact us so the matter can be reviewed.
15. Third-Party Websites
Our website may contain links to third-party websites, platforms, or services. Those third parties operate independently and may have their own privacy policies and data practices.
MerchCrafter™ is not responsible for the privacy practices or content of independent third-party websites.
16. Changes to This Privacy Policy
MerchCrafter™ may update this Privacy Policy when our services, technology, legal requirements, or business practices change.
The latest version will be published on this page with an updated revision date where appropriate.
17. Contact Us
If you have a question about this Privacy Policy, the information we hold about you, or a privacy-rights request, please contact MerchCrafter™.
Email: info@merchcrafter.com
Head Office — Cyprus
MerchCrafter™ Global Studio
Nicosia, Cyprus
European Headquarters
Branch Office — Sri Lanka
MerchCrafter™ Creative Lab
Colombo, Sri Lanka
South Asia Operations
When making a privacy request, please provide enough information for us to identify the relevant interaction or account without sending unnecessary sensitive information.
Privacy Questions?
Questions about privacy, client access, stored project information, or data processing? Contact us directly and we'll review your request.
© 2026 MerchCrafter™
