UnfoldCRO

Privacy Policy

Who We Are

UnfoldCRO (“we”, “our”, “us”) is a Shopify-first engineering and CRO studio providing ecommerce development, platform migrations, theme customization, UX/CRO, SEO, custom web apps/portals, Odoo implementation, and ongoing maintenance.

Website: https://unfoldcro.com
Contact: info@unfoldcro.com

Scope & Roles

  • For our own website and marketing, we act as an independent data controller.
  • For client projects (e.g., building a Shopify store or integrating Odoo), we act as a data processor/service provider and process personal data only under the client's written instructions and the applicable Data Processing Agreement (DPA).

What Data We Collect

  • Contact & business information you provide (name, email, phone, company/brand, role, project details) via forms, email, or discovery calls.
  • Project assets shared by clients (content, images, catalogs, configuration files, environment URLs). Credentials are requested only when strictly required for implementation and handled securely.
  • Technical data from site visits (IP address, device/browser info, pages viewed, timestamps). We may use first-party cookies and, where consented, analytics cookies.
  • Support/ops metadata (ticket IDs, logs, error messages) for troubleshooting and maintenance.
  • Recruitment data (CV/resume, portfolio, contact details) if you apply for a role.

We do not intentionally collect special categories of data (e.g., health, religious beliefs) and we do not collect payment card numbers on our website.

How We Use Your Data

  • Provide and improve services: scoping, building, migrating, and maintaining websites/apps; implementing SEO/CRO; responding to support requests.
  • Communications: proposals, SOWs, project updates, administrative messages.
  • Security & fraud prevention: protecting our services, accounts, and clients' assets.
  • Analytics (with consent where required): understanding site performance and improving UX.
  • Legal & compliance: record-keeping, tax/GST invoicing, responding to lawful requests.

Legal Bases (where applicable)

  • Contract (to deliver a project or support you requested)
  • Legitimate interests (to operate, secure, and improve our services)
  • Consent (for optional analytics/marketing cookies, newsletter sign-ups)
  • Legal obligation (tax, accounting, compliance)

Cookies & Analytics

We use essential cookies to operate the site. With your consent (where required), we may use analytics cookies (e.g., to measure traffic and performance). You can control cookies via your browser settings.

Who We Share Your Data With

  • Service providers/sub-processors that host our site or help us operate. They are bound by confidentiality and process data only on our instructions.
  • Client-mandated platforms used in projects (e.g., Shopify, WordPress, Odoo, hosting/CDN, email providers). These platforms have their own privacy policies.
  • Legal & compliance: if required by law, to protect rights/safety, or in connection with a merger/acquisition.

We do not sell your personal information.

International Transfers

We may process or transfer data to countries other than where you reside. Where required, we implement appropriate safeguards (e.g., contractual clauses or equivalent mechanisms).

Security

We apply reasonable technical and organizational measures appropriate to the risk. No method of transmission or storage is 100% secure.

Data Retention

We retain personal data only as long as necessary for the purposes above, to comply with legal obligations, or to resolve disputes.

Your Rights

Depending on your region's laws, you may have rights to request access, correction, deletion, restriction, portability, or to object/opt-out of certain processing.

  • California residents: rights to know, delete, and opt-out of “sharing” for cross-context behavioral advertising.
  • EU/EEA/UK residents: rights under GDPR, including the right to lodge a complaint with your supervisory authority.
  • Indian residents: you may raise a grievance/complaint as per applicable law.

To exercise your rights, contact: info@unfoldcro.com.

Children's Privacy

Our services are not directed to children. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this policy from time to time. We will post the new version on this page and update the effective date above.

Contact

Questions or requests: info@unfoldcro.com