Privacy Policy

1. Overview

This Privacy Policy explains what information Storefront Business ("Storefront," "we," "us") collects through this website and our subscription service, how we use it, and the choices you have. It applies to visitors to this website and to businesses who sign up for the Service.

2. Information we collect

We collect information in a few ways:

• Information you give us directly — such as your name, business name, email, phone number, and plan interest when you fill out our signup form, or anything you share with us during onboarding calls and ongoing account management.
• Information collected automatically — such as pages visited, general device and browser type, and approximate location, typically collected via cookies or similar technologies (see our Cookies section below).
• Information from third parties — for example, performance data from advertising or analytics platforms connected to your account, used to deliver the Service.

3. How we use it

We use the information we collect to provide and improve the Service, respond to signup requests and support inquiries, send account and billing communications, and — only where you've agreed to it — send marketing updates. We don't sell your personal information.

4. Sharing & third parties

We share information with service providers who help us run the Service — such as hosting providers, email delivery tools, and payment processors — under agreements that limit their use of it to providing services to us. We may also disclose information if required by law, or in connection with a business transfer such as a merger or acquisition.

5. Cookies

This website uses two categories of cookies:

• Essential cookies — needed for the site to function properly (for example, remembering your cookie preference). These are set automatically and can't be turned off through our cookie banner.
• Analytics cookies — help us understand how visitors use the site, so we can improve it. These are only set if you choose "Accept all" in the cookie banner, and you can withdraw consent at any time via the "Cookie Preferences" link in the footer.

You can also control cookies through your browser settings, though blocking essential cookies may affect how the site works.

6. Security measures

We take reasonable technical and organizational measures to protect the information we hold, including:

• Serving this site over HTTPS/TLS encryption in production, so data in transit between your browser and our servers is encrypted.
• Restricting access to client data to team members who need it to do their jobs.
• Using a Content Security Policy and related browser security headers to reduce the risk of cross-site scripting and content-injection attacks on this site.
• Validating and sanitizing form submissions on both the browser and server side, and using spam-detection safeguards on our contact and signup forms.
• Reviewing our third-party providers' own security practices before relying on them to store or process client data.

No method of transmission or storage is 100% secure, and we can't guarantee absolute security, but we work to protect your information using practices like these.

6a. Accounts, free tools & uploads

Member accounts. If you create an account, your name, email address and password are handled by Netlify Identity, our website host's sign-in service. We never see your password. Progress you save in the members area (for example checklist items, tool settings and scores) is stored with your account.

Forms and free tools. When you use the website grader, plan quiz, call request form, or members-area forms, the details you enter (such as your name, email, phone, business name, website address, test results and messages) are saved to a private Google Sheet we use to respond to you, and we may email you about your request. The website grader sends the address you enter to Google's PageSpeed Insights service to run the test.

Uploads. Files members upload are stored in a private Google Drive folder that only the Storefront team can access, and are used only to provide the Service.

Payments. Payments are processed by Stripe. We don't see or store your full card number; we can see your plan, payment status and billing email.

7. Data retention

We keep personal information for as long as needed to provide the Service and for a reasonable period afterward for legal, accounting, or legitimate business purposes, after which it's deleted or anonymized.

8. Your rights & choices

Depending on where you're located, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain uses of it. To exercise any of these rights, contact us using the details below.

9. Children's privacy

This website and Service are intended for business use by adults and aren't directed at children. We don't knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "last updated" date at the top of this page.

11. Contact

Questions about this policy, or requests relating to your personal information, can be sent to storefront_business1@outlook.com.