Privacy Policy

This policy explains how Shopify2Shopify, Unit 122153, PO Box 6945, London, W1A 6US, the data controller, handles your personal data.

What we collect

• Order data — your email, package and payment status (payment card details are handled entirely by Stripe; we never see them).
• Intake data — store domains, app stack, catalog size and notes you provide.
• Store access tokens — Admin API tokens you provide, encrypted with AES-256-GCM at rest, decrypted only by your migration engineer, deleted 30 days after completion.
• Migrated store data — during the migration we process your store's records (including your customers' data) solely to copy them to your destination store, acting as your processor.
• Leads — an email address you submit for an assessment or call request.

What we don't do

No selling of data, no advertising use, no third-party analytics trackers on this site.

Processors

Stripe (payments), Cloudflare (hosting, storage). Store data in transit is protected by TLS.

Retention & your rights

Migration working data and tokens are deleted 30 days after completion; order records are retained for accounting. Email [email protected] to access or delete your data. You may also lodge a complaint with the UK Information Commissioner's Office (ICO).

Controller

Shopify2Shopify, Unit 122153, PO Box 6945, London, W1A 6US · [email protected]