Legal
Privacy policy
Last updated: 21 October 2026
This policy explains what personal data Storewright collects, why, and what you can do about it. Storewright is a brand of VSA LLC, a Wyoming limited liability company in the USA, and we're responsible for your data. You can reach us at contact@thestorewright.com.
What we collect
- When you fill in the audit form or email us: your name, email, store address and anything you write to us.
- When you buy: your name, email, billing details and what you bought. Stripe handles the payment, so we never see or store your full card number.
- When we work on your store: access to your Shopify store, ad accounts and email tool, and the data in them, like orders and customers. We only use it for the work you hired us for.
- When you visit the site: basic technical data our website host keeps, like your IP address and browser, to keep the site running and safe. Our fonts load from Google Fonts, so Google also receives your IP address. We don't use advertising or tracking cookies. If we add analytics or ad tracking later, we'll update this policy and ask for your consent where the law requires it.
Why we use it
- To answer you and prepare your audit, because you asked us to.
- To deliver the services you bought, under our contract with you.
- To take payments and keep tax records, because the law requires it.
- To keep the site and our accounts safe, which is our legitimate interest.
We don't sell your personal data. We don't send you marketing emails unless you agree to them.
Who we share it with
Only with the companies that help us run the business: our payment provider (Stripe), our website host (Netlify), our email providers, and the tools we use on your project, like Shopify, Meta and Omnisend. We also share data with authorities when the law requires it.
Some of these companies are in the USA. When your data moves there from the EU, UK or elsewhere, we rely on the safeguards they offer, such as standard contractual clauses or the EU-US Data Privacy Framework.
How long we keep it
- Audit requests that don't turn into a project: up to 12 months.
- Client records and invoices: as long as tax law requires, usually up to 7 years.
- Access to your accounts: when the work ends, we remove our access or ask you to remove it.
Your rights
Wherever you live, you can ask us to show you the data we have about you, correct it, delete it or stop using it. If you're in the EU or UK, you can also object to how we use it, ask to take it with you, and complain to your local data protection authority. Email contact@thestorewright.com, and we'll answer within 30 days.
Security
We protect your data with strong passwords, two-step login where it's offered, and access only for the people who need it.
Children
Our services are for businesses. We don't knowingly collect data from children under 16.
Changes
If we change this policy, we'll update the date at the top of this page.