Privacy policy

This policy explains what personal information Shyft Stack (formerly Noor Ahmed Ecommerce Solutions) ("we", "us") collects through shyftstack.com and when you work with us, why we collect it, and the choices you have. It applies to visitors and clients in the United States, United Kingdom, European Union, Canada and elsewhere.

Who we are

Shyft Stack is a Shopify development agency with its head office at Villa 102-L, MR-9, Block C, B-17, Islamabad, Pakistan. For the personal information described here, we are the data controller. You can contact us about privacy at info@shyftstack.com.

What we collect

• Details you send us: your name, email address, brand or store name, website, country, budget, timing, the package you are interested in and your message, when you use our contact or package request forms.
• Booking details: your name, email address and chosen time when you book a call through our Google Calendar booking page.
• Messages: anything you send us by email, WhatsApp or through Fiverr, and notes from our calls.
• Project information: store access, content and files you share with us to deliver a project.
• Technical information: our hosting provider keeps standard server logs (such as IP address, browser type and the page requested) for security and to keep the site running.
• Visitor statistics: Vercel Web Analytics counts page views, referring sites, countries and device types so we can see how the site is used, and Vercel Speed Insights measures how quickly pages load. Neither uses cookies, identifies you or follows you across other websites.

We do not use advertising trackers or sell personal information, and we do not knowingly collect information from children under 16.

How we use it, and our legal basis

• To reply to your enquiry, prepare a quote and arrange calls (steps you ask us to take before a contract).
• To deliver and support the work you hire us for (performance of a contract).
• To keep accounting and tax records (legal obligation).
• To keep the website secure and working, and to improve our services (our legitimate interests).
• To send you occasional updates, only if you have asked for them (consent, which you can withdraw at any time).

Who we share it with

We share personal information only with the service providers that help us run the business, under agreements that require them to protect it:

• Vercel (website hosting and privacy-friendly visitor statistics)
• Resend (delivering form submissions to our inbox, and a confirmation email to you)
• Hostinger (our email)
• Google (calendar bookings and video calls)
• Zoom and Meta's WhatsApp (calls and messages, when you choose to use them)
• Fiverr (when you order through Fiverr, under Fiverr's own privacy policy)
• Shopify (when we work in your store, under your agreement with Shopify)

We may also disclose information if the law requires it, or to protect our rights or the safety of others. We never sell or rent your personal information, and we do not share it for cross-context behavioural advertising.

International transfers

Our team is based in Pakistan and our providers operate in several countries, including the United States. When we transfer personal information out of the UK, EU or Canada, we rely on our providers' standard contractual clauses or equivalent safeguards, and we apply the same protection wherever it is handled.

How long we keep it

• Enquiries that do not become projects: up to 24 months, then deleted.
• Client and project records: for the length of our relationship and up to 6 years afterwards, for accounting and legal purposes.
• Store access: removed when the project or support plan ends, or sooner if you ask.

Your rights

Depending on where you live, you can ask us to access, correct, delete or export your personal information, to restrict or object to how we use it, and to withdraw consent. Residents of California and other US states have the right to know what we collect and to ask us to delete it; we do not sell or share personal information as those laws define it, and we will not treat you differently for using your rights.

To make a request, email info@shyftstack.com. We will reply within 30 days. If you are in the UK, you can also complain to the Information Commissioner's Office (ico.org.uk); in the EU, to your local data protection authority; and in Canada, to the Office of the Privacy Commissioner of Canada.

Security

We use encrypted connections, access controls, collaborator access to client stores rather than shared passwords, and two-factor authentication on our accounts. No system is perfectly secure, but we will tell you without undue delay if a breach affects your information.

Changes

We will update this policy when our practices change and show the date of the latest version at the top of this page.