Privacy Policy

Last updated: 6 November 2026

Who looks after your information

Alongside Commerce is run by Richard, a UK-based independent Shopify specialist. Richard is responsible for the personal information described here. For questions about your personal information or to make a privacy request, please use the contact form. Enter your request in the message field (labelled “What’s happening with your store?”), along with your name and email address. You can leave all service, website, budget and timing fields blank.

Enquiries and working together

When you contact me, I collect your name, email address, message and any optional store, agency, project, budget or timing details you provide. Please do not send passwords, payment details or sensitive personal information through the forms.

I use this information to respond, assess your requirements, prepare a proposal and manage any agreed work. For an individual requesting or buying my services, this is necessary to take steps towards or perform a contract. For business representatives and other enquiries, I rely on my legitimate interests in communicating with potential clients and delivering services. I also use necessary technical information to protect the website against spam and abuse.

You choose whether to enquire, but I need your contact details and enough information to respond. An enquiry does not subscribe you to marketing. I do not sell your personal information or make decisions with legal or similarly significant effects solely by automated means.

Where information is handled

I use service providers for UK website hosting, business email, secure backups and website security. Enquiries are stored securely on the website and delivered to my business mailbox. These providers process information as needed to operate and protect these services.

The forms use Cloudflare Turnstile to help prevent spam. Cloudflare processes technical signals such as IP address, browser and device information to distinguish legitimate visitors from automated traffic. See Cloudflare’s Turnstile Privacy Addendum for its use of this information.

Some service providers process information outside the UK, including in the US. Where required, appropriate safeguards apply, such as approved contractual terms or an applicable adequacy decision. You can contact me for details of the providers and safeguards relevant to your information. See also Cloudflare’s privacy policy.

How long information is kept

For enquiries that do not become projects, I review records monthly and delete the enquiry and related email correspondence once 12 months have passed since our last meaningful contact. Email delivery logs are set to delete automatically after 14 days.

If we work together, relevant records are kept for the project and afterwards only as needed for contractual, accounting or legal obligations and resolving disputes. The period depends on the record and applicable requirements. Security records are kept only as needed to investigate and prevent abuse.

Deleted information may remain in restricted backup copies until they are replaced through the backup rotation. Backups are used for recovery; relevant deletions are reapplied if an older backup is restored.

Cookies and technical information

The website and its security services process technical information, including IP addresses and browser details, to operate reliably and prevent abuse. Cookies are used for administrator login and preferences. Turnstile performs browser security checks as explained in its privacy notice above.

Your choices and rights

Depending on the circumstances, you can request access to, correction or deletion of your information; restrict its use; object to processing based on legitimate interests; or request a portable copy. Use the contact form linked above. I normally respond within one month and may need to verify your identity.

If you are unhappy with how I handle your information, please contact me so I can help. You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, or your local supervisory authority where applicable.