Last Updated: 5 May 2026
Artify Lab Ltd is a UK-registered Shopify development and marketing agency. We respect your privacy and are committed to protecting personal data under UK GDPR, EU GDPR, the UK Data Protection Act 2018, and applicable US privacy laws including CCPA/CPRA.
This policy explains what data we collect, why, and your rights.
1. Scope
This policy applies to data collected via:
- Our website [artifylab.co.uk]
- Email, phone, or contact forms
- Shopify Partner access to your store
- Marketing and AI integration services we provide
2. Data We Collect
| Category | Examples | Why We Collect It | Legal Basis UK/EU GDPR |
| *Identity & Contact* | Name, email, phone, company, job title | To communicate, send proposals, deliver services | Contract, Legitimate Interest |
| *Business Data* | Brand assets, product lists, Shopify access | To build and manage your Shopify store | Contract |
| *Financial Data* | Billing address, VAT number. We do NOT store card details | To invoice you and comply with tax law | Contract, Legal Obligation |
| *Technical Data* | IP address, browser, device, cookies, usage data | To secure the site, analytics, improve UX | Legitimate Interest, Consent |
| *Marketing Data* | Email preferences, ad interactions | To send updates if you opt in | Consent |
| *Project Data* | Slack/Email messages, call recordings, project files | To deliver services and support | Contract, Legitimate Interest |
We do not intentionally collect special category data or children’s data.
3. How We Use Data
- Provide Shopify setup, customization, marketing, AI integration
- Process payments and issue invoices
- Provide customer support and manage projects
- Send service emails. Marketing emails only with consent
- Comply with legal, tax, and accounting requirements
- Prevent fraud and secure our services
4. Cookies & Tracking
We use:
- Essential cookies: Required for site function. Always on.
- Analytics cookies: Google Analytics to understand traffic. Opt-in via banner.
- Marketing cookies: Meta/TikTok pixels to measure ad performance. Opt-in only.
5. Data Sharing & Processors
We only share data with trusted third parties needed to run our business:
| Processor | Purpose | Location | Safeguard |
| Shopify | Store hosting & development | Canada/EU/US | SCCs, Adequacy |
| Google Workspace | Email & documents | US/EU | SCCs |
| Xero/QuickBooks | Accounting | UK/US | SCCs, UK Adequacy |
| Meta, Google Ads | Marketing analytics | US/EU | SCCs, Consent |
| Slack, Zoom | Communication | US | SCCs |
All processors are bound by data processing agreements. We never sell personal data.
6. International Data Transfers
As a UK company with global clients and tools, data may be transferred outside the UK/EEA. When we do, we use UK Addendum + EU Standard Contractual Clauses and check for supplementary measures. Shopify and Google are certified under the UK-US Data Bridge where applicable.
7. Data Retention
- Client project files: 6 years after project end for legal/tax records
- Inquiry data: 24 months if no contract signed
- Marketing consent: Until you unsubscribe
- Analytics data: 14 months
You can request earlier deletion unless we must keep it by law.
8. Your Privacy Rights
UK & EU Users – UK GDPR/EU GDPR:
You have rights to access, rectify, erase, restrict, object, data portability, and not be subject to automated decisions. Contact us to exercise these. We respond within 1 month.
California & US Users – CCPA/CPRA:
You have rights to know, delete, correct, and opt-out of sale/share. We do NOT sell or share personal data for cross-context behavioral advertising. To exercise rights, email [info@artifylab.co.uk]. We will verify identity before responding.
All Users:
Opt-out of marketing: click “unsubscribe” in any email or contact us.
9. Data Security
We use SSL encryption, access controls, 2FA, staff training, and regular reviews. While no system is 100% secure, we follow industry standards to protect data.
10. Children’s Privacy
Our services are B2B and not directed to under 16s. We do not knowingly collect data from children.
11. Third-Party Links
Our site may link to Shopify, app stores, or client sites. We’re not responsible for their privacy practices. Check their policies.
12. Policy Updates
We may update this policy for legal or operational reasons. “Last Updated” date will change. Material changes will be notified by email or site banner.
13. Contact & Complaints
Data Protection Contact: [info@artifylab.co.uk]
