Privacy Policy

Last updated: June 12, 2026

At Aqsa Shahzad Official LLC, we build and grow Shopify stores for brands that care about getting the details right — and how we handle your information is one of those details. We believe privacy should be simple to understand, so this policy explains, in plain language, what we collect, why we collect it, who we share it with, and the control you keep over your own data.

This Privacy Policy applies to our website at aqsashahzadofficialllc.com and to the Shopify development, platform migration, conversion optimization, and retention marketing services we provide (together, the “Services”). It covers everyone who interacts with us — whether you’re browsing the site, getting in touch about a project, or already working with us as a client.

By using the site or sharing your information with us, you agree to the practices described below. If anything here isn’t clear, or you’d like to know more about how your data is handled, you’re always welcome to reach out using the details at the end of this page.

1. Scope and Roles

This Privacy Policy applies to information collected from website visitors, prospective clients, and clients of the Company. It does not apply to the privacy practices of any third party that we do not own or control.

Where we collect personal information for our own purposes, the Company acts as the data controller. Where we process personal information belonging to a client’s end customers in the course of delivering Services, the client is the controller and the Company acts as a processor or service provider, processing such information solely in accordance with the client’s documented instructions and the applicable service agreement.

2. Information We Collect

We collect the following categories of personal information:

Contact and inquiry information. Name, email address, telephone number, business or company name, website address, and the contents of any message, project brief, or budget information you submit through our contact form, by email, or during a consultation.
Scheduling information. Details provided when booking a consultation through our scheduling provider, including the requested date, time, and any notes you include.
Technical and usage information. Internet Protocol (IP) address, approximate geographic location, browser type and version, device characteristics, referring URLs, pages viewed, and dates and times of access, collected automatically through cookies and similar technologies.
Client engagement information. Access credentials, platform permissions, and project assets provided by clients to enable performance of the Services, including Shopify staff access, application logins, and brand materials.

We do not knowingly collect special categories of sensitive personal data, and we request that such information not be submitted to us through the Site.

3. How We Use Information

We use personal information for the following purposes:

To respond to inquiries, schedule consultations, and prepare proposals and estimates;
To provide, perform, maintain, and improve the Services;
To administer client engagements, including project communication and invoicing;
To send service-related communications and, where you have opted in, marketing communications;
To operate, analyze, and improve the Site;
To detect, prevent, and address fraud, security incidents, or misuse; and
To comply with applicable legal, tax, accounting, and regulatory obligations.

4. Legal Bases for Processing

For individuals located in the United Kingdom, the European Economic Area, or other jurisdictions with comparable laws, we process personal information on one or more of the following legal bases: (a) your consent; (b) the performance of a contract to which you are a party, or steps taken at your request prior to entering into a contract; (c) our legitimate interests in operating and improving our business, provided such interests are not overridden by your rights; and (d) compliance with a legal obligation. Where processing is based on consent, you may withdraw that consent at any time.

5. Cookies and Tracking Technologies

The Site uses cookies and similar technologies to operate the Site, retain preferences, analyze traffic, and measure marketing performance. These technologies are generally categorized as strictly necessary, analytics, and marketing. The Site may use third-party tools, including Google Analytics (GA4), the Meta (Facebook) Pixel, and comparable advertising and measurement technologies.

You may manage your preferences through any consent mechanism presented on the Site or through your browser settings. Disabling certain cookies may affect the functionality of the Site.

6. Disclosure of Information

The Company does not sell personal information. We disclose personal information only as set out below:

Service providers. Vendors that perform functions on our behalf, including website hosting, email, scheduling, analytics, advertising, and invoicing, who are authorized to use the information only as necessary to provide their services to us.
Marketing and commerce platforms. Platforms such as Klaviyo, Omnisend, Brevo, and Shopify, accessed and configured in connection with client engagements.
Professional advisors. Legal, accounting, and other professional advisors, where reasonably required.
Legal and regulatory disclosures. Government authorities, regulators, or other parties where disclosure is required by law or necessary to protect our rights.

7. International Transfers

The Company operates with clients and service providers located in multiple jurisdictions, and personal information may be transferred to, stored in, or processed in countries other than your country of residence. Where personal information is transferred internationally, we take steps to ensure it receives an adequate level of protection consistent with applicable law.

8. Data Retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including to provide and support the Services and to satisfy legal, tax, and accounting requirements. Inquiry information from prospective clients who do not engage the Company is retained for a limited period and then deleted. When personal information is no longer required, we delete or anonymize it.

9. Information Security

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, and destruction, including access controls, the use of reputable platforms, and the removal of access to client systems upon completion of an engagement. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

10. Your Rights

Subject to applicable law, including the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), you may have the right to:

Request access to the personal information we hold about you;
Request correction of inaccurate or incomplete information;
Request deletion of your personal information;
Object to or request restriction of certain processing;
Withdraw consent and opt out of marketing communications; and
Request that your personal information not be sold (the Company does not sell personal information).

To exercise any of these rights, please contact us using the details in Section 13. We will respond within the time required by applicable law and will not discriminate against you for exercising your rights.

11. Third-Party Links

The Site and our communications may contain links to third-party websites and platforms that are not operated by the Company. We are not responsible for the privacy practices of such third parties, and we encourage you to review their privacy policies before providing personal information.

12. Children’s Privacy

The Services are directed to businesses and adults. We do not knowingly collect personal information from individuals under the age of sixteen (16). If we become aware that we have collected such information, we will delete it promptly.

13. Changes and Contact

We may amend this Privacy Policy from time to time to reflect changes in our practices or applicable law. Revisions take effect upon posting, and the “Last updated” date above will be revised accordingly. Your continued use of the Site following any change constitutes acceptance of the revised policy.

For questions about this Privacy Policy or to exercise your rights, please contact: