PRIVACY POLICY

Privacy Policy.

Last updated May 4, 2026.

Information we collect

We collect information that you choose to provide when you contact us, submit a form, schedule a consultation, request a proposal, or otherwise communicate with Sevenbrand. This may include your name, email address, phone number, company name, website URL, project details, budget range, and any other information you include in your message. We use this information to understand your needs, respond to your inquiry, and determine whether our services are a good fit for your business. You should avoid sending sensitive personal information unless it is necessary for the project or specifically requested.

We may also collect limited technical information when you visit our website or interact with our digital properties. This may include your IP address, browser type, device type, operating system, referral source, pages viewed, time spent on the site, and general usage activity. If you become a client, we may collect business-related information necessary to perform our services, such as access credentials, store configuration details, analytics data, app information, theme files, or documentation you provide. Any client-provided access is used only for the purpose of delivering the agreed services.

How we use information

We use the information we collect to communicate with you, evaluate potential projects, prepare proposals, provide services, manage client relationships, and support the operation of our business. For example, we may use your contact information to respond to inquiries, schedule calls, send project updates, deliver documentation, or follow up about services you requested. We may also use project and business information to diagnose technical issues, plan Shopify builds or migrations, improve storefront performance, and provide ongoing support. We do not use client access or project information for unrelated purposes.

We may use website usage information to improve our website, understand how visitors find us, measure the performance of our content, and identify which services or pages are most useful to prospective clients. This information helps us refine our messaging, improve user experience, and make better business decisions. We may also use analytics or similar tools to understand aggregate trends and website behavior. These tools are not intended to identify you personally unless you voluntarily provide your contact information.

We may use your information for administrative, security, and legal purposes. This includes maintaining business records, protecting our systems, enforcing agreements, preventing misuse, complying with applicable laws, and resolving disputes. We may also use information to send service-related messages, invoices, project notices, or important updates about our business relationship. Where required by law, we will obtain your consent before sending marketing communications.

  • To respond to inquiries, schedule consultations, and provide proposals.
  • To deliver Shopify development, design, migration, optimization, and support services.
  • To improve our website, services, client experience, and internal operations.
  • To protect our business, clients, systems, and legal rights.

How we share information

We do not sell your personal information. We may share information only when necessary to operate our business, provide services, work with trusted service providers, comply with legal obligations, or protect our rights. This may include sharing limited information with vendors who help us with hosting, analytics, email, project management, payment processing, design, development, or other business operations. These providers are expected to use the information only as needed to perform services for us.

Service providers and project partners

We may work with third-party tools, contractors, platforms, or service providers to deliver services to clients. For example, we may use tools related to Shopify, hosting, analytics, communication, file storage, code repositories, design collaboration, project management, or payment processing. When we share information with these providers, we limit the information to what is reasonably necessary for the task. Contractors or project partners who assist with client work are expected to protect confidential information and use it only for the project.

Legal, business, and safety reasons

We may disclose information if required to do so by law, regulation, legal process, court order, or governmental request. We may also disclose information when we believe it is necessary to protect Sevenbrand, our clients, our website, our systems, or others from fraud, security threats, misuse, or legal claims. If our business is involved in a merger, acquisition, reorganization, asset sale, or similar transaction, information may be transferred as part of that transaction. In that case, we would take reasonable steps to ensure the information remains protected.

Your rights and choices

Depending on where you live, you may have certain rights regarding your personal information. These rights may include the ability to request access to the information we have about you, request that we correct inaccurate information, request deletion of certain information, or object to certain uses of your information. We will review and respond to requests in accordance with applicable law. We may need to verify your identity before fulfilling certain requests.

You may choose not to provide certain information, but this may limit our ability to respond to your inquiry or provide services. You may also unsubscribe from marketing emails by using the unsubscribe link in the message or by contacting us directly. Service-related communications, such as project updates, invoices, security notices, or contract-related messages, may still be sent when necessary. If you are a client and want access removed from a Shopify store, hosting account, repository, or other system, please contact us so we can coordinate the appropriate steps.

  • Request access to, correction of, or deletion of certain personal information.
  • Opt out of marketing communications where applicable.
  • Request that we remove or update access to client systems when a project or engagement ends.

Cookies and tracking

Our website may use cookies, pixels, analytics tools, and similar technologies to operate the site, understand visitor behavior, improve performance, and support marketing or measurement efforts. Cookies are small files placed on your device that help websites remember information about your visit. For example, cookies may help us understand which pages visitors view, how they arrive at our site, and whether our website is functioning properly. Some cookies may be set by third-party tools that help us measure traffic or improve our services.

You can control cookies through your browser settings and may be able to block, delete, or limit certain tracking technologies. If you disable cookies, some parts of the website may not function as intended. We may also use analytics tools that collect information in an aggregated or pseudonymous manner. These tools help us improve the website and are not intended to collect sensitive personal information.

Data retention

We retain personal and business information only for as long as reasonably necessary to fulfill the purposes described in this policy. This may include retaining information to respond to inquiries, provide services, maintain business records, comply with legal obligations, resolve disputes, and enforce agreements. The length of time we retain information depends on the type of information, the nature of our relationship with you, and applicable legal or business requirements. When information is no longer needed, we take reasonable steps to delete, archive, or de-identify it.

Client project information

For client projects, we may retain project-related information such as requirements, notes, deliverables, communications, invoices, credentials history, technical documentation, and other records needed to support the work we performed. This information helps us provide ongoing support, troubleshoot issues, maintain continuity, and document the scope of services provided. We encourage clients to remove or rotate access credentials when a project ends or when team members no longer need access. Upon request, we will take reasonable steps to delete or return client-provided materials, subject to legal, contractual, backup, and operational requirements.

We may retain certain information for legitimate business purposes even after a project ends. For example, we may keep invoices, contracts, tax records, communications, and project summaries as part of our normal business records. We may also retain limited technical records when needed to protect against disputes, security issues, or future support questions. Where possible, we limit retained information to what is necessary for those purposes.

We may maintain backup copies of information for a limited period as part of our routine backup and disaster recovery processes. Backup copies may not be immediately deleted from all systems, but they are not used for active business purposes unless restoration is necessary. When backups are overwritten or expire, the information is removed according to our normal retention practices. We take reasonable steps to ensure retained information remains protected during the retention period.

Security

We take reasonable administrative, technical, and organizational measures to protect the information we collect and handle. These measures may include limiting access to information, using secure tools, maintaining password protections, enabling multi-factor authentication where available, and restricting client system access to authorized personnel. We also encourage clients to use strong passwords, role-based permissions, and secure access practices when granting access to Shopify, hosting, analytics, repositories, or other platforms. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

When we access client systems, we use the access for the purpose of performing agreed services. We do not intentionally access, copy, export, or modify client data unless necessary for the project, support request, or authorized service. Clients remain responsible for managing their own platforms, permissions, customer data practices, and compliance obligations. If we become aware of a security issue that may affect your information or project, we will take reasonable steps to investigate and notify affected parties when appropriate.

  • Restricting access to client information and systems based on project needs.
  • Using secure communication, storage, and collaboration tools where appropriate.
  • Encouraging multi-factor authentication and least-privilege access.
  • Removing or updating access when team members or contractors no longer need it.
  • Reviewing security practices as our business, tools, and client needs evolve.

Children's privacy

Our services are intended for businesses and are not directed to children under the age of 13. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child without appropriate consent, we will take reasonable steps to delete that information. If you believe a child has provided us with personal information, please contact us using the information below.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, tools, legal obligations, or privacy practices. When we make changes, we will update the “Last updated” date at the top of this page. The updated policy will apply once it is posted unless otherwise stated. We encourage you to review this page periodically to stay informed about how we handle information.

If we make material changes to this policy, we may provide additional notice where appropriate. This may include posting a notice on our website, contacting clients directly, or taking other reasonable steps depending on the nature of the change. Your continued use of our website or services after an updated policy is posted means you acknowledge the revised policy. If you do not agree with the updated policy, you should stop using our website and contact us with any concerns.

How to contact us

If you have questions about this Privacy Policy, our privacy practices, or how we handle information, you can contact us using the email address below. Please include enough detail for us to understand your request and respond appropriately. If you are a current or former client, please include your company name and the project or service your request relates to. We may need to verify your identity before responding to certain privacy-related requests.

CONTACT

hello@sevenbrand.io

We aim to respond to privacy-related requests within a reasonable timeframe. In most cases, we will review and respond within 30 days, unless a shorter or longer period is required or permitted by applicable law. Some requests may require additional information from you before we can complete them. If we need more time, we will let you know when appropriate.