Privacy policy

Who we are

Noor Ahmed Ecommerce Solutions is a Shopify Select Partner studio working with brands across the United States, United Kingdom, Europe, and Australia. For any privacy question or request, the data controller is reachable at noor@noorahmed.net.

What we collect, and why

We collect only the information you give us, plus the bare minimum a web server needs to operate safely.

• Contact form submissions. Your name, email address, company name, and message. We use this to reply to your enquiry and, if a project follows, to manage the engagement. Stored in our email inbox.
• Newsletter signups. Just your email address. We use it to send occasional studio notes (Shopify, conversion, growth). Once a month at most.
• Server logs and rate-limiting data. When you submit a form we temporarily hold your IP address in memory to enforce rate-limits and stop abuse. The IP is not written to disk and expires within the hour. Web server access logs may also briefly record IP, user-agent, and requested URL for security and debugging.

We do not set tracking cookies, run advertising pixels, or operate any third-party analytics on this site at this time. If we add privacy-respecting analytics in the future (such as a self-hosted Plausible instance), we'll update this page before doing so.

How we use your information

• To reply to your enquiry and discuss potential or active work.
• To send the newsletter you signed up for (and only that).
• To prevent abuse, spam, and brute-force attempts on the site.
• To comply with legal obligations where they apply (tax records, contractual obligations).

We do not sell your data, share it with advertisers, or use it for automated decision-making.

Who processes your data on our behalf

A small number of vetted vendors process data on our behalf. Each is bound by contract to use it only for the purpose we specify:

• Hostinger: our email host. Form submissions arrive at and are stored in our Hostinger-hosted inbox.
• Hetzner: our infrastructure provider (Germany). The web server runs on Hetzner. Personal data is not stored on the server itself; it transits to our email host.

Data may be transferred outside your country to the providers above. Where applicable, we rely on Standard Contractual Clauses or equivalent safeguards for cross-border transfers.

How long we keep it

• Contact enquiries are retained while there is an active or prospective engagement, then for up to 24 months in case you come back. After that we delete them, unless retention is required for tax or legal reasons.
• Newsletter subscriptions are kept until you unsubscribe. Every newsletter we send includes a one-click unsubscribe link.
• Rate-limit and server-log data expires automatically. IPs held for rate-limiting are dropped within an hour; access logs rotate within 30 days.

Your rights

If you're in the UK, EU, or another region with similar data protection laws, you have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct anything inaccurate.
• Ask us to delete your data, where there's no legal reason for us to keep it.
• Object to processing, or ask us to restrict it.
• Withdraw consent at any time (where we're relying on consent, e.g. the newsletter).
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email noor@noorahmed.net. We'll respond within 30 days, usually much sooner.

Security

The site runs over HTTPS with HSTS preload, modern security headers, and a server hardened against common probes. Form submissions are rate-limited and honeypot-protected. We follow the principle of least data. If we don't need a field, we don't ask for it. We'll notify affected users within 72 hours of becoming aware of any breach that puts personal data at material risk.

Children

The site is intended for businesses and adults. We do not knowingly collect data from anyone under 16. If you believe a child has provided us with personal information, contact us and we'll delete it.

Changes to this policy

If we change the way we handle data, we'll update this page and bump the “Last updated” date at the top. Material changes will be flagged in our next newsletter and at the top of this page for 30 days.

Contact

Questions, requests, or anything else privacy-related. Email noor@noorahmed.net.