Privacy Policy

Last updated: 21 December 2025

This Privacy Policy explains how StoreFactory (“we”, “us”, “our”) collects, uses, stores, and protects personal data when you use our website, platform, and services (collectively, the “Services”).

By using StoreFactory, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

StoreFactory provides e-commerce infrastructure, online storefronts, automation, integrations, and managed technical services for businesses.

For the purposes of data protection laws, StoreFactory acts as:

  • a Data Controller for data relating to our own operations, website, and customers; and
  • a Data Processor where we process personal data on behalf of our clients through their online stores or systems.

2. Data We Collect

2.1 Data You Provide Directly

We may collect:

  • Name, email address, phone number
  • Business details
  • Billing and payment information
  • Account credentials
  • Support communications
  • Contractual or onboarding information

2.2 Data Collected Automatically

When you use our Services, we may collect:

  • IP address
  • Device and browser information
  • Log data and timestamps
  • Usage metrics and performance data
  • Cookies and similar tracking technologies

2.3 Client Store Data

When we provide services to clients operating online stores, we may process:

  • End-customer names, emails, addresses
  • Order, payment, and transaction data
  • Account or login details
  • Customer support messages

This data is processed only on behalf of the client, who remains the Data Controller.

3. How We Use Data

We use personal data to:

  • Provide and operate the Services
  • Set up, manage, and maintain online stores
  • Process payments and subscriptions
  • Deliver support and communicate with users
  • Monitor performance, reliability, and security
  • Improve and develop our Services
  • Comply with legal and regulatory obligations

We do not sell personal data.

4. Legal Bases for Processing (GDPR)

We process personal data under the following legal bases:

  • Contractual necessity – to deliver agreed services
  • Legitimate interests – service improvement, security, fraud prevention
  • Legal obligation – compliance with law
  • Consent – where explicitly required (e.g. marketing communications)

5. Cookies & Tracking

StoreFactory uses cookies and similar technologies to:

  • Operate the website and platform
  • Analyse usage and performance
  • Improve user experience

You may control cookies through your browser settings. Disabling cookies may affect functionality.

6. Data Sharing & Third Parties

We may share data with trusted third-party providers, including:

  • Hosting and infrastructure providers
  • Payment processors
  • Analytics and monitoring services
  • Communication and support tools

All third parties are contractually required to protect personal data and process it in accordance with applicable law.

7. International Data Transfers

Some data may be processed outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections.

8. Data Retention

We retain personal data only for as long as necessary to:

  • Provide the Services
  • Meet contractual or legal obligations
  • Resolve disputes or enforce agreements

Client store data is retained according to client instructions and contractual terms.

9. Data Security

We implement reasonable technical and organisational measures to protect personal data, including:

  • Secure hosting environments
  • Access controls
  • Encryption where appropriate
  • Monitoring and logging

However, no system is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Under applicable data protection laws, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent (where applicable)

Requests can be made using the contact details below.

11. Client Store End-Users

If you are an end-customer of a store built or managed by StoreFactory, your relationship is with the store owner, not StoreFactory.

Requests regarding your personal data should be directed to the store operator, who is the Data Controller.

12. Children’s Data

StoreFactory does not knowingly collect data from children under 16. If we become aware that such data has been collected, we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. Continued use of the Services constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or requests regarding this Privacy Policy or your data:

Email: info@pirnaha-studios.co.uk Website: https://storefactory.shop

Final note (for you, not legal text)