Privacy Policy

Komerce ("we", "us", "our") is a specialist Shopify and Faire commerce agency providing store design, development, conversion optimisation, wholesale catalog management and growth services. For any privacy question you can reach us at hello@komerce.site.

We act as a data controller for information collected through our website and enquiries, and as a data processor when we handle store or customer data on behalf of a client.

Information you give us: your name, email address, company name, website or store URL, role, budget range, project goals and anything else you share in a form, booking or email conversation.

Scheduling data: when you book a call, our scheduling provider (Calendly) collects your name, email, timezone and answers to booking questions so the meeting can be arranged.

Technical data: IP address, browser and device type, referring URL, pages viewed and approximate location, collected automatically when you browse the site.

Client project data: during an engagement we may be granted access to your Shopify admin, Faire account, analytics, email platform or similar systems. We only access what is needed to deliver the agreed work.

To respond to enquiries, prepare proposals, schedule calls and deliver contracted services.

To operate, secure and improve our website and measure which content is useful.

To send project updates, invoices and — where you have opted in — occasional commerce insights. You can unsubscribe at any time.

To meet legal, accounting and tax obligations.

Where GDPR or similar laws apply, we rely on: performance of a contract (delivering our services), legitimate interests (responding to business enquiries, securing and improving our site), consent (marketing email and non-essential cookies) and legal obligation (records retention).

We use a small number of essential cookies to make the site work and may use privacy-respecting analytics to understand aggregate traffic. Third-party embeds such as our scheduling widget may set their own cookies. You can block or delete cookies in your browser; essential functionality may be affected.

We never sell personal data. We share it only with service providers that help us operate — hosting and website infrastructure, scheduling, email, cloud storage, accounting and analytics — and only to the extent required to provide their service.

We may also disclose data when legally required, or in connection with a merger or business transfer, in which case this policy will continue to apply.

Our providers may process data outside your country. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

Enquiry data is kept for up to 24 months from last contact. Client and financial records are kept for the duration of the engagement plus the period required by law, typically seven years. Access credentials to client platforms are removed or rotated at the end of a project on request.

We use reputable providers, least-privilege access, strong authentication and encrypted connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable steps to protect your data and will notify affected parties of a material breach without undue delay.

Depending on your location you may request access to, correction of, deletion of, or a copy of your personal data, object to or restrict certain processing, and withdraw consent for marketing.

To exercise any right, email hello@komerce.site. We respond within 30 days and may need to verify your identity first.

Our services are intended for businesses. We do not knowingly collect data from anyone under 16.

We may update this policy as our services or legal obligations change. The revision date at the top always reflects the current version, and material changes will be communicated to active clients.