This Privacy Policy explains how The Shopify Guys Pty Ltd (ABN 28 672 603 226), trading as The Shopify Guys (“we”, “us”, “our”), handles personal information.
We are committed to handling personal information responsibly and transparently.
This policy applies to information collected through theshopifyguys.com.au, enquiries made to us, and personal information we may handle while providing Shopify development and related services.
Where applicable, we handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Information we collect
The types of personal information we collect depend on how you interact with us.
If you submit a contact form or request a free app audit, we may collect:
- your name
- email address
- phone number, if provided
- company or business name
- country
- Shopify store URL
- apps or software you use
- current software costs
- information about your existing systems or workflows
- details you include in your enquiry
- files or screenshots you choose to provide
You should not send passwords, API keys, credit card information or unnecessary customer records through our website forms.
Information handled during projects
If you engage us to perform development work, we may also collect or have access to:
- business contact information
- Shopify store information
- Shopify collaborator access
- theme and application configuration
- API credentials
- technical logs
- Git repositories
- infrastructure information
- billing and invoicing information
- project communications
- information required to understand your business workflows
Depending on the project, our authorised access to your Shopify systems may also expose us to personal information relating to your customers, such as names, email addresses, order information or support records.
We only seek access to customer information where reasonably necessary to perform the agreed work.
Where possible, we prefer restricted permissions, development environments, test data and the minimum access necessary for the project.
How we collect information
We generally collect personal information directly from you when you:
- submit a website form
- email us
- request an app audit
- ask for a quote
- enter into a project with us
- provide access to your Shopify store or other systems
- communicate with us during a project
We may also receive information from systems or service providers you authorise us to access as part of a project.
Technical information
Our website infrastructure may automatically process limited technical information such as:
- IP address
- browser or device information
- request information
- date and time of access
- security and network information
This information may be processed by our hosting and security providers as part of operating and protecting the website.
How we use information
We may use personal information to:
- respond to enquiries
- assess whether an app can reasonably be replaced
- prepare quotes and proposals
- provide Shopify development services
- communicate about projects
- configure and test software
- provide technical support
- manage invoicing and payments
- maintain business and project records
- improve our services and internal processes
- protect our website and systems from misuse
- comply with legal obligations
- resolve disputes or investigate security issues
Submitting an enquiry or app audit does not automatically subscribe you to marketing emails.
If we introduce newsletters or other marketing communications in the future, we will provide appropriate notice and unsubscribe controls and update this policy where required.
Client customer information
Some Shopify development projects may require temporary access to information relating to your customers.
Where we handle this information solely to perform services for a client, we generally do so on that client's instructions and only for purposes connected with the project.
We do not use client customer data to:
- build marketing lists
- market The Shopify Guys directly to your customers
- sell customer information
- create unrelated customer profiles
Clients remain responsible for determining whether their collection and use of customer information is lawful and for providing any notices or obtaining any permissions required for their business.
Where a project involves material handling of personal information, additional privacy, security or data-processing requirements may be included in the project agreement.
Disclosure of information
We do not sell or rent personal information.
We may disclose information where reasonably necessary to:
- providers that host or operate our website and systems
- email delivery providers
- contractors assisting with an authorised project
- professional advisers such as accountants, lawyers or insurers
- service providers specifically required for your project
- authorities where disclosure is required or authorised by law
- protect our rights, systems, clients or users
Where a third-party service is introduced specifically for your project, we will generally identify material ongoing providers and costs before implementation.
Cloudflare
Our website is designed to use Cloudflare for hosting, networking, security and server-side form processing.
Cloudflare may process information relating to visitors to websites using its services, including IP addresses, traffic-routing information and other request metadata. Cloudflare operates a global network and uses service providers in multiple countries.
Information processed through Cloudflare may therefore be handled outside Australia.
Cloudflare maintains privacy, data-processing and security documentation governing its services.
Resend
We use Resend to deliver website enquiry and app-audit emails.
Information submitted through a form may therefore be transmitted through Resend so that the enquiry can be delivered to our business inbox.
Resend is operated by Plus Five Five, Inc. in the United States and uses service providers located primarily in the United States. Its current subprocessor list includes providers involved in hosting, email delivery, monitoring and related infrastructure.
Resend states that email and log data for its Free, Pro and Scale plans is ordinarily retained for 30 days, with remaining customer data deleted within 90 days after termination of its services, subject to its applicable terms and backup arrangements.
Overseas processing and storage
Some of the technology providers we use operate internationally.
Personal information may therefore be processed or stored in:
- Australia
- the United States
- and other countries in which our service providers or their subprocessors operate
Where the Australian Privacy Principles apply, overseas disclosures are subject to applicable requirements under the Privacy Act.
APP 8 generally requires an APP entity to take reasonable steps in relation to overseas recipients and can make an Australian entity accountable in certain circumstances for how an overseas recipient handles personal information.
Because provider infrastructure and subprocessor locations can change, the current privacy and subprocessor documentation of relevant providers should also be consulted.
Information retention
We only aim to retain personal information for as long as reasonably required for the purpose for which it was collected, legitimate business requirements, dispute management or legal obligations.
Unless an enquiry becomes part of an ongoing client relationship, we generally aim to retain enquiry information for no longer than 24 months after the last meaningful interaction.
We may delete information sooner where it is no longer useful or required.
Information relating to completed projects may be retained for longer where reasonably required for:
- support
- security
- project history
- contractual obligations
- invoicing
- taxation
- accounting
- insurance
- legal or dispute purposes
Financial and business records may be retained for periods required by applicable law.
After a project is completed, we aim to remove access and delete unnecessary working copies of personal information when that information is no longer reasonably required.
Some data may remain temporarily within backups, logs or third-party systems according to those systems' normal retention processes.
Security
We take reasonable technical and organisational measures to protect personal information against:
- unauthorised access
- loss
- misuse
- modification
- disclosure
Depending on the system, these measures may include:
- restricted user permissions
- authentication controls
- encrypted connections
- environment variables for secrets
- separate development environments
- access revocation following project completion
- reputable hosting and infrastructure providers
No internet-connected system can be guaranteed to be completely secure.
If you believe information provided to us has been compromised, contact us promptly at hello@theshopifyguys.com.au.
Credentials and access
Please do not send passwords or API keys through ordinary enquiry forms.
Where credentials are required for development work, we will use an appropriate method of obtaining and storing them where reasonably practical.
We encourage clients to:
- use Shopify collaborator accounts where available
- provide the minimum permissions required
- use dedicated API credentials
- rotate credentials following completion where appropriate
- revoke development access that is no longer required
Cookies and analytics
At the date of this policy, our website does not use advertising pixels or behavioural analytics tracking.
We do not currently use website visitor information for behavioural advertising.
Our infrastructure may use essential cookies or similar technologies where required for:
- website operation
- security
- fraud or spam prevention
- form functionality
If we later introduce services such as Google Analytics, Meta Pixel, advertising cookies or similar tracking technologies, we will review and update this Privacy Policy and implement appropriate notification or consent controls where required.
Marketing communications
We do not treat submission of a contact form or app audit as consent to receive unrelated marketing communications.
If you separately choose to receive marketing from us, you may unsubscribe at any time using the unsubscribe mechanism provided or by contacting:
hello@theshopifyguys.com.au
We may still send service-related messages required for an enquiry or active client project.
Access, correction and deletion
You may contact us if you would like to:
- ask what personal information we hold about you
- request access to that information
- ask us to correct information that is inaccurate or out of date
- ask us to delete information where appropriate
Contact:
hello@theshopifyguys.com.au
We may need to verify your identity before providing access to or changing personal information.
We will respond within a reasonable period and will explain if there is a lawful reason why a request cannot be fulfilled.
Privacy complaints
If you believe we have mishandled your personal information, please contact us first so that we can investigate.
Send your complaint to:
hello@theshopifyguys.com.au
Please include enough information for us to understand:
- what happened
- what information was involved
- what outcome you are seeking
We will acknowledge and investigate privacy complaints and aim to provide a substantive response within 30 days, although complex matters may require additional time.
If the Privacy Act applies and you are dissatisfied with our response, you may have the right to raise the matter with the Office of the Australian Information Commissioner (OAIC).
Automated decisions
We do not currently use personal information submitted through this website to make solely automated decisions that significantly affect an individual's rights or interests.
If that changes, we will update this policy where required.
Third-party websites
Our website may link to third-party websites or services.
We are not responsible for the privacy practices of third-party websites that we do not control. You should review their privacy policies before providing personal information to them.
Changes to this policy
Our services and technology providers may change over time.
We may update this Privacy Policy to reflect:
- new services
- new providers
- changes to information-handling practices
- changes to applicable law
The current version will be published on our website with its most recent update date.
We recommend checking this page periodically if you want to understand our current privacy practices.
Contact details
For privacy enquiries, requests or complaints:
The Shopify Guys Pty Ltd
ABN 28 672 603 226
Trading as: The Shopify Guys
Email: hello@theshopifyguys.com.au
Postal address:
PO Box 5083
Lavington NSW 2641
Australia