Legal

Privacy policy.

Last updated: 16 June 2026

This privacy policy explains how Ecom Majesty ("Ecom Majesty", "we", "us", "our") collects and uses your personal data when you visit ecommajesty.com or submit an enquiry.

1. Who we are

Ecom Majesty is the data controller for personal data collected via this website. Contact us at [email protected] with any data-related queries.

2. What we collect

Enquiry form submissions

When you complete the contact form we collect: email address, store URL, monthly revenue range, current platform, main growth constraint, timeline, and optionally your theme/app stack and any additional context you provide.

Analytics

We use Google Analytics 4 (with Consent Mode v2) and Microsoft Clarity. If you consent to analytics cookies, these tools collect aggregated usage data (pages visited, session duration, device type, approximate location) and, via Clarity, anonymised session replay and heatmaps showing how pages are used. Clarity masks form inputs and text by default. We do not collect analytics data without your consent. For more information about how Microsoft collects and uses your data, see the Microsoft Privacy Statement.

Bot-protection data

Our contact form uses Cloudflare Turnstile to detect automated submissions. Turnstile processes a browser signal to confirm you are human; it does not use third-party cookies and Cloudflare does not share this data with us beyond a pass/fail result.

Server logs

Cloudflare, which hosts this website, may retain server access logs (IP address, request path, timestamp) for security and abuse-prevention purposes, per its own data-retention policies.

3. Lawful basis for processing

  • Enquiry data: legitimate interest — to respond to your enquiry and assess whether we can help your business.
  • Analytics: consent — we only activate GA4 and Microsoft Clarity after you accept analytics cookies via our consent banner.
  • Security / server logs: legitimate interest — preventing abuse and maintaining site security.

4. Who we share your data with

We use the following processors. We do not sell or share your personal data with any third party for marketing purposes.

  • Cloudflare Inc. — website hosting, edge network, Turnstile bot-detection, and D1 database (lead storage). Data may be processed in the US under a DPA with standard contractual clauses.
  • Resend Inc. — transactional email delivery (internal notification and your auto-confirmation email). Data is processed in the US under a DPA.
  • Google LLC — Google Analytics 4 (only if you consent). Google may process data in the US. We use Consent Mode v2 to limit data collection to consented users.
  • Microsoft Corporation — Microsoft Clarity session analytics (only if you consent). Microsoft may process data in the US; we use it for product analytics only, never advertising.

5. How long we keep your data

  • Enquiry submissions: retained in our lead database for 24 months unless you request deletion sooner.
  • Email records: retained in our email provider for 12 months.
  • Analytics data: per Google Analytics 4 defaults (14 months for event data). You can request deletion at any time by contacting us.

6. Your rights (GDPR)

You have the right to:

  • Access a copy of the personal data we hold about you.
  • Rectify inaccurate personal data.
  • Erase your personal data ("right to be forgotten").
  • Restrict processing of your personal data in certain circumstances.
  • Receive your data in a structured, machine-readable format (data portability).
  • Object to processing based on legitimate interest.
  • Withdraw consent at any time (for analytics, use the Cookie settings link in the footer — this does not affect the lawfulness of processing before withdrawal).

To exercise any right, email [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the data protection supervisory authority in your country.

7. Cookies

For full details of the cookies we use and how to manage them, see our cookie policy. You can change your cookie preferences at any time via the link in the page footer.

8. International transfers

Some of our processors (Cloudflare, Resend, Google, Microsoft) are based in or transfer data to the United States. We ensure adequate safeguards are in place via Standard Contractual Clauses (SCCs) or equivalent mechanisms.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. For material changes we will make reasonable efforts to notify you.

10. Contact

Privacy queries: [email protected]