Privacy policy

Last updated 14 October 2026

Who we are

This website is run by Charles Marsh, trading as EC Web, a Shopify agency based in Cambridge, United Kingdom. For this website we are the data controller under UK data protection law (the UK GDPR and the Data Protection Act 2018).

For anything about your data, email hello@ec-web.co.uk.

What we collect and why

• Contact form. Your name, email address and, if you give them, your company, role, store address, budget and message. We use these to reply to you and, if you go ahead, to scope and price your project. Our lawful basis is your request for us to reply (steps before a contract) and our legitimate interest in answering business enquiries.
• Forge waitlist. Your email address and anything else you add to the form, so we can tell you when Forge launches. Our lawful basis is your consent, which you can withdraw at any time by emailing us.
• Booked calls. When you book a call, the booking tool collects your name, email address and anything you add to the booking, so we can hold the call.
• Emails you send us. We keep correspondence so we can reply and keep a record of what was agreed.
• Website analytics. We use Google Analytics to see how many people visit, which pages they read and roughly where they come from. It uses cookies and collects information such as pages viewed, device and browser type, and approximate location. We use it to improve the website, under our legitimate interest in understanding how it is used.
• Server logs. Our hosting keeps short-lived technical logs, including IP addresses, to keep the site secure and working.

We don’t sell personal data, and we don’t use it for advertising.

Who we share it with

We use a small number of service providers to run the website and our business:

• Fly.io, which hosts this website on servers in London
• Resend, which delivers form submissions to our inbox
• Cal.com, which handles call bookings
• Google, for Google Analytics
• Our email provider, for messages you send us

Some of these providers are based in, or use servers in, the United States. Where data leaves the UK, it is protected by the UK-US data bridge or by the UK’s standard contract clauses.

How long we keep it

• Enquiries that don’t become projects: up to two years, then deleted
• Client records and correspondence: six years after the project ends, for tax and legal reasons
• Forge waitlist: until Forge launches or you ask to be removed
• Google Analytics data: 14 months

Cookies

Google Analytics sets cookies (named _ga and _ga_*) to tell visits apart. The booking tool may set cookies when you open it. You can block or delete cookies in your browser settings, or opt out of Google Analytics on every site with Google’s opt-out add-on.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to move it to another provider. Where we rely on your consent, you can withdraw it at any time. Email hello@ec-web.co.ukand we’ll reply within a month.

If you’re unhappy with how we’ve handled your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Our apps

This policy covers this website. Each of our Shopify apps has its own privacy policy, linked from its App Store listing or its own website.

Changes

If we change this policy, we’ll update the date at the top. See also our website terms.