Privacy Policy

Last updated: 27 October 2026

This Privacy Policy explains how An Opencart Expert ("we", "us", "our") collects, uses, shares and protects your personal data when you visit anopencartexpert.com (the "Website") or use our OpenCart development, support, hosting and digital marketing services (the "Services"). We are committed to handling your data lawfully, fairly and transparently in line with the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations ("PECR").

1. Who we are

For the purposes of data protection law, we are the data controller of personal data collected through the Website and through our direct dealings with prospective and existing clients.

An Opencart Expert
45 Fitzroy Street, London, United Kingdom, W1T 6EB
Phone: +44 20 3973 9209
Email: info@anopencartexpert.com

2. Personal data we collect

Information you give us

• Contact details: name, email address, phone number, company name and job title when you submit a form, email or call us.
• Project information: requirements, store URLs, screenshots, files and other details you share when requesting a quote or support.
• Commercial information: billing name and address, VAT details and payment history (we do not store full card numbers; payments are handled by third-party payment providers or bank transfer).
• Correspondence: messages, support tickets and call notes.
• Access credentials: if you grant us access to your hosting, admin panel, FTP, database or other systems so we can deliver the Services, we handle these as confidential (see section 11).

Information collected automatically

• Device and usage data: IP address, browser type and version, operating system, referring URL, pages viewed, time spent, and clicks.
• Cookie and tag data: identifiers set by cookies, pixels and similar technologies (see sections 4 and 5).

We do not knowingly collect special category data (such as health or biometric data) and ask that you do not send it to us.

3. How and why we use your data

We do not sell your personal data. We do not use your data for solely automated decision-making that produces legal or similarly significant effects.

4. Cookies and similar technologies

Cookies are small text files stored on your device. We use the following categories:

• Strictly necessary cookies: required for the Website to function (for example security and form handling). These do not require consent.
• Analytics cookies: help us understand how visitors use the Website so we can improve it.
• Advertising cookies: used to measure the effectiveness of our campaigns and to show relevant ads on other websites.

Where required by law, we only set non-essential cookies after you have given consent through our cookie banner. You can change or withdraw your consent at any time via the cookie settings link on the Website, and you can also control cookies through your browser settings. Blocking some cookies may affect how the Website works.

5. Analytics, advertising and remarketing

We may use the following third-party services, each of which may place cookies or similar identifiers on your device and process data in accordance with its own privacy policy:

• Google Analytics to analyse Website traffic and behaviour. Learn more at Google's "How Google uses information from sites or apps that use our services".
• Google Ads, including conversion tracking and remarketing, to measure our advertising and to show our ads to people who have previously visited the Website. Third-party vendors, including Google, may show our ads on sites across the internet.
• Social media platforms (for example LinkedIn and Facebook) where we use their embeds, pixels or tags.

You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of Google Analytics using the Google Analytics opt-out browser add-on. You can also manage interest-based ads through Your Online Choices.

Where we use Google's advertising features we follow Google's requirements, including obtaining the consent that applies to visitors from the UK and European Economic Area, and we do not use remarketing based on sensitive categories.

6. Who we share your data with

We share personal data only where necessary and with appropriate safeguards:

• Service providers (processors) such as website hosting, email and communication tools, CRM, project management, cloud storage, accounting software and payment processors.
• Analytics and advertising providers described in section 5.
• Professional advisers such as accountants, lawyers and insurers.
• Subcontractors and associates who help us deliver Services, bound by confidentiality and data protection obligations.
• Authorities where we are required to do so by law or to protect our rights.
• Business transferees if our business is merged, sold or restructured, in which case your data may be transferred to the new owner, who must honour this policy.

7. International transfers

Some of our providers are located outside the UK, including in the European Economic Area and the United States. Where we transfer personal data outside the UK, we ensure a suitable safeguard is in place, such as an adequacy decision, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or another mechanism permitted by UK GDPR.

8. How long we keep your data

• Enquiries that do not lead to a project: up to 24 months from last contact.
• Client and project records: for the duration of the relationship and up to 6 years afterwards for legal, tax and accounting purposes.
• Marketing preferences: until you unsubscribe or withdraw consent (we keep a minimal suppression record so we do not contact you again).
• Analytics and cookie data: according to the retention periods set in the relevant tool, typically 14 to 26 months.
• Client system credentials: deleted or returned when the relevant work or support period ends.

9. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, including access controls, encryption in transit where available, and confidentiality obligations for our team. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office and, where required, affected individuals without undue delay.

10. Your rights

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data in certain circumstances.
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests and to direct marketing at any time.
• Data portability for data you provided that we process by automated means under consent or contract.
• Withdraw consent at any time, without affecting the lawfulness of earlier processing.

To exercise any of these rights, email info@anopencartexpert.com. We may need to verify your identity, and we will respond within one month. There is normally no fee. If you are in the European Economic Area, equivalent rights apply under the EU GDPR.

11. Client store data (when we act as processor)

When we work on a client's OpenCart store, we may have access to personal data of the client's customers (such as names, addresses, orders and emails). In that situation, the client is the data controller and we act as a data processor on the client's documented instructions. We will only access and use that data as necessary to deliver the agreed Services, keep it confidential, apply appropriate security measures, and delete or return it at the end of the engagement. Clients who require a written data processing agreement should contact us. Clients remain responsible for ensuring they have a lawful basis to share such data with us.

12. Children's privacy

Our Website and Services are intended for businesses and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Third-party links

The Website may link to third-party websites, including client websites featured in our portfolio. We are not responsible for the privacy practices or content of those sites and encourage you to read their privacy policies.

14. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it was last revised. Material changes will be highlighted on the Website or notified to you where appropriate.

15. Contact us and complaints

If you have questions about this Privacy Policy or how we handle your data, contact us at:

An Opencart Expert
45 Fitzroy Street, London, United Kingdom, W1T 6EB
Email: info@anopencartexpert.com
Phone: +44 20 3973 9209

You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint or by calling 0303 123 1113. We would appreciate the chance to address your concerns first.