Privacy Policy

This policy explains what personal data ECOM SPIDER LLC collects through this website and in the course of providing its services, why we collect it, how long we keep it, and what rights you have over it.

1. Who we are

ECOM SPIDER LLC ("Ecom Spider", "we", "us") is a limited liability company registered in the State of Wyoming, United States. We are the data controller for the personal data described in this policy.

• Registered office: 30 N Gould St, Ste R, Sheridan, WY 82801, United States
• Privacy contact: contact@ecomspider.xyz

2. What we collect

2.1 Information you give us

When you submit our contact form or email us, we receive:

• Your name
• Your email address
• Your company name and store URL, if you provide them
• The revenue range you select, if you select one
• The content of your message and any subsequent correspondence

All fields other than name, email and message are optional.

2.2 Information collected automatically

Our hosting provider records standard server and security logs, which may include IP address, browser user-agent, requested page and timestamp. These are generated for security, abuse prevention and reliability, and we do not use them to build profiles of individual visitors.

2.3 Client engagement data

During an engagement we are granted access to systems belonging to our clients, which may contain personal data relating to their customers. In that context our client is the data controller and we act as a processor on their documented instructions. The terms governing that relationship are set out in the engagement agreement, not in this policy.

2.4 What we do not collect

This website runs no advertising pixels, no analytics cookies and no third-party tracking scripts. We do not use cookies for advertising, profiling or cross-site tracking, which is why you were not asked to accept a cookie banner. We do not collect special category data, and we do not ask for payment card details through this website.

3. Why we use it, and our lawful basis

Purpose	Lawful basis (UK/EU GDPR)
Responding to your enquiry and discussing a possible engagement	Steps taken at your request prior to entering a contract (Art. 6(1)(b))
Delivering services under an agreed engagement	Performance of a contract (Art. 6(1)(b))
Website security, abuse prevention and reliability	Our legitimate interest in operating a secure service (Art. 6(1)(f))
Keeping accounting and tax records	Compliance with a legal obligation (Art. 6(1)(c))

We do not send marketing emails to people who have simply submitted an enquiry. If we ever introduce a mailing list, it will be opt-in and separately consented to.

4. Who we share it with

We do not sell personal data, and we do not share it with advertisers or data brokers. We use a small number of service providers who process data on our behalf under contract:

• Website hosting and security — serving this website and protecting it from abuse
• Business email — receiving and replying to your correspondence
• Transactional email delivery — delivering contact form submissions to our inbox
• Accounting and payment processing — invoicing clients and keeping statutory records

We may also disclose personal data where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims.

5. International transfers

We are established in the United States and our service providers are primarily located there. If you contact us from the United Kingdom, the European Economic Area or another jurisdiction with data transfer restrictions, your personal data will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses in our agreements with those providers.

6. How long we keep it

• Enquiries that do not become engagements: up to 24 months from the last contact, then deleted
• Client records: for the duration of the engagement and 7 years afterwards, to meet accounting and tax record-keeping obligations
• Server and security logs: retained for a short rolling period by our hosting provider, typically no more than 30 days

7. How we protect it

This website is served over TLS, so data submitted through it is encrypted in transit. Access to our inbox and business systems is restricted to personnel who need it and is protected by multi-factor authentication. When working in client systems we request the minimum permission level required, use named accounts rather than shared logins, and our access is revoked when the engagement ends.

No method of transmission or storage is completely secure, and we do not claim otherwise. If a breach affecting your personal data occurs and the law requires notification, we will notify you and the relevant supervisory authority within the applicable deadline.

8. Your rights

Depending on where you are located, you may have the right to:

• Request a copy of the personal data we hold about you
• Have inaccurate data corrected
• Request deletion of your data
• Restrict or object to how we process it
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time, where we rely on consent
• Lodge a complaint with your data protection supervisory authority

To exercise any of these, email contact@ecomspider.xyz. We will respond within 30 days. We may ask you to confirm your identity before acting on a request, to make sure we are not disclosing your data to somebody else.

8.1 If you are a California resident

You have the right to know what personal information we collect and the purposes for which it is used, to request deletion, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act. Use the same contact address above.

9. Children

Our services are directed at businesses, not consumers, and are not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

If we change this policy we will update the date at the top of the page. Where a change materially affects how we use personal data we already hold, we will take reasonable steps to notify the people concerned directly.

11. Contact

Questions about this policy or about how we handle your data:

• Email: contact@ecomspider.xyz
• Post: ECOM SPIDER LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States