Privacy notice

1. Scope

This notice applies to the public website at merchantcanvas.com. Individual MerchantCanvas Shopify apps have or will have their own product-specific privacy information covering the data processed inside those apps.

2. Information you choose to provide

If you contact MerchantCanvas by email, you may provide your name, email address, Shopify store URL, company or agency context, and details about the workflow you are evaluating. The current website contact form is static: it prepares a message in your email application and does not submit the form to a MerchantCanvas server.

Do not include passwords, access tokens, customer lists, payment information, or other sensitive store data in an initial enquiry.

3. Analytics and advertising technology

The website is prepared to support Google Tag Manager, Google Analytics 4, Google Ads conversion tracking, and Meta Pixel. These services remain disabled unless the owner configures the relevant IDs and a visitor grants analytics consent through the website preference interface.

If consent is granted, configured services may receive page, product, app-selection, contact-intent, and lead events together with permitted campaign attribution such as UTM parameters, gclid, or fbclid. The final configured vendors, retention periods, and regional controls must be confirmed before launch.

4. Local and session storage

The site uses local storage to remember whether you selected analytics or essential-only preferences. Campaign attribution is stored in session storage only after analytics consent is granted. Before consent, supported campaign parameters may be carried in the URL when you follow a primary internal call to action.

5. Hosting and service providers

The site is intended to be hosted on Cloudflare infrastructure. Cloudflare may process technical request information needed to deliver and protect the website, such as IP address, request headers, timing, and security signals, according to the final account configuration and Cloudflare terms.

Email providers process messages sent to the MerchantCanvas contact address. Analytics providers process data only if they are configured and consent is granted as described above.

6. Purpose and retention

Contact information is intended to be used to respond to enquiries, assess product fit, provide requested availability updates, and maintain a relevant business conversation. Final retention periods and deletion procedures must be documented by the owner before launch.

7. Sharing

MerchantCanvas does not intend to sell personal information. Information may be processed by providers needed to host the site, operate email, secure the service, and run consented analytics. It may also be disclosed when legally required. The final vendor list and contractual arrangements require owner review.

8. Your choices

You can choose essential-only operation or grant analytics consent from the cookie preference interface. You can reopen preferences from the site footer. You may also ask about information provided in a contact conversation by emailing support@merchantcanvas.com.

Specific statutory rights vary by location. This draft does not claim compliance with any particular jurisdiction until reviewed by qualified counsel.

9. Security and children

Reasonable technical and organisational safeguards should be applied to the final website and business systems. No online service can promise absolute security. The website and products are intended for businesses and are not directed to children.

10. Changes and contact

This notice should be updated when the hosting, analytics, contact flow, legal entity, or product practices change. Questions can be sent to support@merchantcanvas.com. The owner must confirm that this address is monitored before launch.