Skip to main content

Privacy policy

Last updated: September 9, 2026

1. Who we are

Trafik Plus LTD ("Trafik Plus", "we", "us", "our") is a company registered in England and Wales under company number 15198434, with registered office at:

24-26 Arcadia Avenue, Fin009, London, N3 2JU, England

We design and develop Shopify themes and related digital products and services for direct-to-consumer (DTC) Shopify brands, and we operate the website trafik.plus.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Trafik Plus LTD is the data controller of the personal data described in this policy, except where section 9 applies.

2. How to contact us

  • Privacy enquiries: hello@trafik.plus
  • Postal address: 24-26 Arcadia Avenue, Fin009, London, N3 2JU, England

3. Scope

This policy covers:

  • trafik.plus and any subdomains
  • Communications with us (email, contact forms, calls, video calls)
  • Purchases of themes or digital products, whether made directly through us or via the Shopify Theme Store
  • Development, design, or support services we provide to your business

It does not cover third-party websites we link to, or the Shopify stores of our clients, except in our capacity as a processor (section 9).

4. What personal data we collect

a) Website visitors

IP address, device and browser type, pages viewed, referral source, approximate geographic location, and cookie/analytics identifiers (see section 7).

b) Customers and clients

Name, email address, company name, billing address, Shopify store URL, phone number (if provided), purchase and order history, invoices and payment confirmation (we do not store full card numbers — this is handled by our payment processor, Shopify), project briefs, support correspondence, and any credentials or store access you grant us to deliver a project.

c) Newsletter and marketing list subscribers

Name, email address, and engagement data (opens, clicks) via our email platform Mailchimp.

5. How we collect it

  • Directly from you: forms, emails, calls, project onboarding
  • Automatically: cookies and analytics when you browse trafik.plus
  • From Shopify: if you buy a Trafik Plus theme via the Shopify Theme Store, Shopify shares limited order data with us as the developer of the theme
  • From third parties you authorise: e.g. if you grant us access to your Shopify store or connected tools

6. Why we use your data and our legal basis

Purpose

Legal basis (UK GDPR Art. 6)

Provide and deliver purchased themes, products, or services

Performance of a contract

Respond to enquiries and provide support

Contract / legitimate interests

Process payments and invoicing

Contract / legal obligation

Send order confirmations, service or security notices

Contract / legal obligation

Send marketing emails

Consent, or legitimate interests for existing customers on a soft opt-in basis (PECR), always with an opt-out

Analyse and improve the website

Legitimate interests, or consent for non-essential cookies

Prevent fraud and enforce our terms

Legitimate interests

Comply with tax, accounting, or regulatory obligations

Legal obligation

7. Cookies and similar technologies

trafik.plus uses cookies and similar technologies to:

  • Run the site (essential/strictly necessary — no consent required)
  • Measure traffic and usage (analytics — Google Analytics — consent required)
  • Support advertising or retargeting, if used (Meta Pixel — consent required)

Where cookies are not strictly necessary, we ask for your consent via a cookie banner before they are set, in line with the Privacy and Electronic Communications Regulations (PECR). You can withdraw consent at any time via ? or your browser settings.

8. Who we share your data with

We share personal data only where necessary, with:

  • Shopify (platform provider for themes and, where applicable, checkout)
  • Payment processors: Shopify
  • Email/CRM platform: Mailchimp
  • Website hosting/CMS provider: Netlify, Sanity CMS
  • Analytics providers: Google Analytics
  • Professional advisers (accountants, solicitors) where needed
  • Law enforcement or regulators, where required by law
  • A buyer or successor, in the event of a merger, acquisition, or sale of the business

We do not sell personal data to third parties for their own marketing purposes.

9. When we act as a processor on your Shopify store

Delivering theme installation, custom development, or support may require access to your live Shopify store. Where that store contains personal data of your own customers, we act as a data processor on your instructions, not as controller of that data. In that role we:

  • Use the data only to deliver the agreed service
  • Do not use it for our own purposes
  • Apply appropriate security measures while we have access
  • Remove or return access on completion of the engagement, and delete any copies we hold, unless you ask us to retain them or the law requires otherwise

A data processing agreement is available on request for clients who require one.

10. International transfers

Some of our providers (for example Shopify, hosting, or analytics services) may store or process data outside the UK. Where this happens, we rely on the UK adequacy regulations, the UK International Data Transfer Agreement/Addendum, or equivalent Standard Contractual Clauses incorporated into our contracts with those providers, to ensure your data receives an equivalent standard of protection.

11. How long we keep your data

We keep personal data only as long as necessary for the purpose it was collected, and to meet legal requirements — for example, financial and accounting records are generally kept for 6 years under the Companies Act 2006.

12. Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data erased, in certain circumstances
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact hello@trafik.plus. We will normally respond within one month.

You also have the right to complain to the UK's supervisory authority:

Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Website: ico.org.uk | Helpline: 0303 123 1113

13. Security

We use appropriate technical and organisational measures to protect personal data, including access controls, encryption of data in transit, and confidentiality obligations for staff and contractors. No system is completely secure, and we cannot guarantee absolute security of data transmitted to us.

14. Children's data

Our website and services are directed at businesses (Shopify store owners and DTC brands), not at children. We do not knowingly collect personal data from anyone under 13.

15. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows when it was last revised. Material changes will be notified via the website or, where appropriate, by email.

16. Contact

Questions about this policy: hello@trafik.plus Trafik Plus LTD, 24-26 Arcadia Avenue, Fin009, London, N3 2JU, England