Privacy Policy

IPLEX DIGITAL LTD ("IPLEX Digital", "IPLEX", "we", "us", or "our") respects your privacy and is committed to protecting personal information that we collect and process.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit iplexdigital.com, submit an enquiry, request an audit, book a meeting, communicate with us, interact with our marketing, or engage with our services.

This Privacy Policy applies where IPLEX Digital determines how and why personal information is processed. Where we process personal information solely on behalf of a client, different contractual terms and data processing arrangements may apply, as explained below.

1. Who We Are

The data controller responsible for personal information covered by this Privacy Policy is:

IPLEX DIGITAL LTD
Company Number: 16607265

Registered Office:
Office 365, 182–184 High Street North
East Ham
London
E6 2JA
United Kingdom

Website: iplexdigital.com
Email: info@iplexdigital.com

IPLEX Digital provides ecommerce consulting, Shopify development, store rebuilds, migrations, B2B and wholesale solutions, integrations, conversion optimisation and related digital services.

2. Information We Collect

The information we collect depends on how you interact with us.

Information You Provide Directly

We may collect information that you voluntarily provide, including:

• full name;

• business email address;

• company or brand name;

• website or ecommerce store URL;

• approximate annual online revenue range;

• services or areas of assistance selected;

• enquiry or project information;

• messages and correspondence;

• meeting or appointment details;

• information provided during consultations or strategy calls;

• project requirements and business objectives; and

• any other information that you choose to provide to us.

You are not required to provide information that is not necessary for your enquiry. However, if you choose not to provide certain information, we may be unable to properly assess or respond to your request.

We do not intentionally request sensitive personal information through our standard website forms. Please do not submit passwords, payment card details, health information, government identification numbers or other unnecessary sensitive information through our enquiry forms.

Information Collected Automatically

When you visit or interact with our website, we and our technology providers may automatically collect information such as:

• IP address;

• browser type and version;

• device type;

• operating system;

• approximate geographic location;

• referring website or source;

• landing page;

• pages viewed;

• session activity;

• clicks and website interactions;

• date and time of access;

• cookie and similar identifiers;

• campaign and referral information, including UTM parameters;

• advertising attribution data;

• conversion events; and

• technical or diagnostic information.

This information may be collected through cookies, pixels, tags and similar technologies as described below.

3. Information We May Receive From Other Sources

We may receive information about business contacts or prospective clients from sources such as:

• referrals;

• existing clients;

• business partners;

• professional networking platforms;

• publicly available company websites;

• publicly available professional information;

• advertising platforms;

• analytics providers;

• scheduling platforms; and

• other lawful business sources.

Where required by applicable law, we will provide appropriate privacy information when personal information has not been collected directly from you.

4. How We Use Personal Information

We may use personal information to:

• respond to enquiries and requests;

• assess whether and how our services may be suitable for your business;

• conduct consultations or strategy calls;

• provide audits, assessments, proposals or estimates;

• prepare statements of work or other project documentation;

• provide and manage our services;

• communicate with prospective and existing clients;

• manage client relationships;

• provide customer or project support;

• improve our website, services and internal processes;

• analyse website traffic and visitor behaviour;

• measure marketing and advertising effectiveness;

• attribute enquiries and conversions to marketing campaigns;

• conduct appropriate business development activities;

• send marketing communications where permitted by law;

• maintain website and information security;

• detect or prevent fraud, misuse or other unlawful activity;

• maintain records;

• comply with legal, regulatory, accounting and tax obligations;

• establish, exercise or defend legal claims; and

• protect our rights, property, users and business.

We do not use personal information for materially incompatible purposes without providing appropriate notice or obtaining consent where required.

5. Our Lawful Bases for Processing

Where UK or European data protection law applies, we process personal information only where we have an appropriate lawful basis.

Depending on the circumstances, we may rely on:

Steps Before Entering Into a Contract

Where you ask us to provide information, evaluate a project, prepare a proposal or take other steps before entering into a business relationship.

Performance of a Contract

Where processing is necessary to provide services or fulfil obligations under an agreement with you or your organisation.

Legitimate Interests

We may process information where it is reasonably necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• responding to business enquiries;

• evaluating prospective projects;

• managing client relationships;

• operating and developing our business;

• improving our website and services;

• measuring business and marketing performance;

• maintaining security;

• preventing misuse;

• conducting appropriate B2B business development; and

• protecting our legal and commercial interests.

Consent

We may rely on consent where required, including for certain cookies, advertising technologies or marketing activities.

Where processing is based on consent, you may withdraw that consent at any time.

Legal Obligations

We may process information where necessary to comply with legal, tax, accounting, regulatory or other obligations.

6. Lead Qualification and Business Profiling

IPLEX Digital primarily provides services to ecommerce businesses.

When you submit an enquiry, we may evaluate information such as:

• your company or brand;

• website or ecommerce store;

• approximate annual online revenue range;

• requested services;

• project requirements;

• ecommerce platform;

• business objectives; and

• information contained in your enquiry.

We may use this information to understand your requirements, assess potential project fit, prioritise or route enquiries and determine which IPLEX Digital services may be appropriate.

This process may involve basic profiling or categorisation of business enquiries.

We do not currently make solely automated decisions using personal information that produce legal effects or similarly significant effects on individuals.

7. Artificial Intelligence and Automated Tools

IPLEX Digital may use artificial intelligence, machine learning, automation tools, large language models and similar technologies to assist with legitimate business activities, which may include:

• internal operations;

• research and analysis;

• content preparation;

• software development;

• workflow automation;

• customer or project support;

• marketing operations; and

• service delivery.

Where personal information is processed using such tools, we aim to use appropriate privacy, contractual, access and security controls.

We do not use AI or automated systems to make solely automated decisions about individuals that produce legal or similarly significant effects without appropriate safeguards where required by law.

The use of AI-assisted tools does not remove our responsibility to protect personal information appropriately.

8. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, scripts, local storage and similar technologies.

These technologies may be used for:

• essential website functionality;

• security;

• remembering user preferences;

• analytics;

• understanding website performance;

• measuring visitor engagement;

• advertising attribution;

• conversion measurement;

• audience measurement; and

• advertising or remarketing where permitted.

Our current website and marketing technology may include services such as:

Google Analytics

We may use Google Analytics to understand how visitors interact with our website and to measure website performance.

Google Tag Manager

We may use Google Tag Manager to manage analytics, measurement and marketing technologies deployed on our website.

Google Ads

We may use Google Ads technologies for advertising attribution, campaign measurement and conversion tracking and, where enabled and legally permitted, advertising audience functionality.

LinkedIn

We may use the LinkedIn Insight Tag and related LinkedIn technologies to measure advertising performance, track conversions and, where enabled and legally permitted, support advertising audiences.

Calendly

We may use Calendly to facilitate scheduling of meetings or strategy calls. Information you provide through Calendly may also be processed by Calendly in accordance with its own privacy practices.

Framer

Our website is built or delivered using Framer and associated website technologies.

These providers may receive technical information and online identifiers when their services are used.

9. Cookie Choices and Consent

Where applicable law requires consent before non-essential technologies are used, we seek appropriate consent before activating those technologies.

Website visitors may be provided with controls allowing them to:

• accept non-essential technologies;

• reject non-essential technologies; or

• manage their preferences.

Essential technologies required for website operation, security or functionality may operate without consent where permitted by law.

Your browser may also provide controls for cookies and related technologies. Blocking certain technologies may affect some website functionality.

You may change your preferences where a cookie preference tool is available on our website.

10. Advertising and Conversion Measurement

IPLEX Digital may advertise its services through platforms including Google and LinkedIn.

Subject to applicable law and your privacy choices, advertising and measurement technologies may allow us to:

• identify which campaigns drive visits to our website;

• measure form submissions;

• measure booked meetings or strategy calls;

• understand conversion performance;

• measure advertising effectiveness;

• improve campaign targeting;

• create or use advertising audiences where permitted; and

• reduce irrelevant advertising.

We may also use information about completed enquiries or other business outcomes to improve marketing measurement where legally permitted and subject to appropriate safeguards.

We do not intentionally send sensitive personal information or the contents of private client communications to advertising platforms for advertising purposes.

11. Marketing Communications

We may send business-related marketing communications where permitted by applicable law.

These communications may include:

• ecommerce insights;

• Shopify-related information;

• agency updates;

• service information;

• event or webinar invitations;

• relevant educational content; and

• other business communications that we believe may be relevant to the recipient's professional role.

Our legal basis for marketing may vary depending on the recipient, communication method and jurisdiction.

Submitting a website enquiry does not, by itself, mean that you are required to receive unrelated marketing communications.

You may opt out of marketing communications at any time by:

• using the unsubscribe link contained in an email; or

• contacting us at info@iplexdigital.com.

We may retain limited information about your opt-out request so that we can continue to respect it.

Opting out of marketing does not prevent us from sending necessary transactional, project, contractual, legal or administrative communications.

12. How We Share Personal Information

We do not sell personal information for monetary consideration.

We may disclose information to trusted third parties where reasonably necessary for legitimate business purposes, including:

• website and hosting providers;

• analytics providers;

• advertising and measurement platforms;

• scheduling providers;

• cloud and infrastructure providers;

• communication and email providers;

• CRM and workflow platforms;

• contractors and service providers working on our behalf;

• professional advisers, including accountants and lawyers;

• insurers;

• financial or payment providers where applicable;

• regulators or government authorities;

• courts or law enforcement where required by law; and

• parties involved in a merger, acquisition, financing, restructuring, reorganisation or sale of all or part of our business.

Where third-party service providers process personal information on our behalf, we seek to use appropriate contractual, privacy and security arrangements where required.

Some third-party platforms may act as independent controllers for certain processing activities and will process information in accordance with their own privacy notices.

13. Client Data and IPLEX Digital as a Processor

This Privacy Policy primarily applies to personal information for which IPLEX Digital determines the purpose and means of processing.

During client engagements, however, we may access or process personal information contained in systems operated by or for our clients.

For example, Shopify development, migrations, B2B implementations, ERP or CRM integrations and related services may involve access to information concerning a client's:

• customers;

• users;

• employees;

• suppliers;

• orders;

• accounts; or

• other business records.

Where we process this information solely on the instructions of our client, the client will generally act as the controller and IPLEX Digital will act as a processor, service provider, contractor, or equivalent role under applicable privacy law.

Such processing is governed by the applicable client agreement and, where required, a Data Processing Agreement or equivalent contractual terms.

If you are a customer or user of one of our clients and have questions about the handling of information held by that client, you should generally contact the relevant client directly.

14. International Transfers

IPLEX Digital is established in the United Kingdom and operates internationally.

Our clients, prospects and service providers may be located in the United Kingdom, European Economic Area, United States and other jurisdictions.

Personal information may therefore be accessed from or transferred to countries other than the country in which it was originally collected.

Where applicable law restricts international transfers, we use or require appropriate legal mechanisms where necessary. Depending on the circumstances, these may include:

• an applicable adequacy decision or adequacy regulation;

• approved standard contractual clauses;

• the UK International Data Transfer Agreement;

• the UK Addendum to the European Commission's Standard Contractual Clauses; or

• another lawful transfer mechanism.

We may also take additional contractual, technical or organisational measures where appropriate.

You may contact us if you would like more information about the safeguards applicable to a particular transfer.

15. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, accounting, contractual and regulatory requirements.

Our typical approach is:

Prospective Client Enquiries

Information relating to enquiries and prospective engagements may generally be retained for up to 24 months after the last meaningful interaction, unless there is a reasonable business or legal reason to retain it longer.

Client and Project Records

Information relating to client engagements may generally be retained for the duration of the relationship and for up to six years after the relevant engagement ends, where appropriate for accounting, contractual, legal or dispute-resolution purposes.

Marketing Information

Marketing information may be retained while we have a lawful reason to use it or until you opt out, subject to reasonable review.

We may maintain a limited suppression record after an opt-out to ensure that we continue to honour your preference.

Analytics and Advertising Information

Analytics, cookie and advertising information is retained according to applicable consent choices, our platform configurations, provider settings and applicable law.

We may retain information for longer where reasonably necessary to comply with law, investigate security issues, resolve disputes or establish, exercise or defend legal claims.

16. Data Security

We use reasonable and appropriate technical and organisational measures designed to protect personal information from:

• unauthorised access;

• unlawful use;

• accidental loss;

• alteration;

• destruction; and

• unauthorised disclosure.

Our measures may include access restrictions, authentication controls, role-based permissions, account security, reputable infrastructure providers, system controls and internal procedures.

However, no website, cloud platform, internet transmission or electronic storage system can be guaranteed to be completely secure.

Where we become aware of a personal data breach, we assess and respond to it in accordance with applicable legal obligations.

17. Your UK and European Privacy Rights

If UK or European data protection law applies to you, you may have rights regarding your personal information, subject to applicable conditions and exceptions.

These may include the right to:

• access personal information we hold about you;

• obtain a copy of certain personal information;

• correct inaccurate or incomplete information;

• request deletion of information;

• request restriction of processing;

• object to certain processing based on legitimate interests;

• receive certain information in a portable format;

• withdraw consent where processing is based on consent; and

• exercise applicable rights relating to automated decision-making.

Your Right to Object to Direct Marketing

You have the right to object to the use of your personal information for direct marketing at any time.

Where you exercise this right, we will stop using your personal information for direct marketing as required by applicable law.

To exercise a privacy right, contact:

info@iplexdigital.com

We may need to verify your identity before fulfilling certain requests.

Privacy rights are not absolute and applicable law may allow or require us to refuse or limit certain requests.

18. United States Privacy Rights

Residents of certain U.S. states may have additional privacy rights where the relevant state privacy law applies to IPLEX Digital and to the particular processing activity.

Depending on applicable law, these rights may include the ability to:

• request access to personal information;

• request correction;

• request deletion;

• obtain a portable copy of certain information;

• opt out of certain targeted advertising;

• opt out of certain sales or sharing of personal information;

• limit certain uses of sensitive information where applicable; and

• appeal certain decisions relating to a privacy request where applicable.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

To submit a request, contact:

info@iplexdigital.com

We may request information necessary to verify your identity or authority to make the request.

19. Sale, Sharing and Targeted Advertising Under U.S. Laws

IPLEX Digital does not sell personal information for monetary consideration.

However, some U.S. privacy laws define terms such as "sale", "share", "sharing" or "targeted advertising" more broadly than an ordinary monetary sale.

As a result, the use of certain advertising or analytics technologies may be treated as sharing, targeted advertising or another regulated activity under certain laws.

Where an applicable law gives you the right to opt out, we will provide or honour an appropriate method of exercising that right where required.

This may include website privacy controls or recognised browser-based preference signals where legally required and technically applicable.

20. Personal Information Categories for U.S. Residents

Where applicable U.S. privacy law requires category-based disclosures, we may collect or process categories including:

We do not intentionally collect sensitive personal information through our standard website enquiry process.

21. Your Choices

Depending on your location and how you interact with us, you may be able to control personal information by:

• adjusting cookie preferences;

• rejecting non-essential cookies;

• opting out of marketing communications;

• exercising applicable privacy rights;

• using browser privacy settings; or

• contacting us directly.

Where applicable law requires us to recognise a legally valid browser-based opt-out preference signal, we will do so as required by applicable law and where technically applicable.

22. Children's Privacy

IPLEX Digital provides professional and business-to-business services.

Our website and services are not directed toward children, and we do not knowingly seek to collect personal information from individuals under the age of 18 through our business enquiry process.

If you believe that a child has provided personal information to us, please contact us so that we can review the matter and take appropriate action.

23. Third-Party Websites and Services

Our website may contain links to websites, platforms or services operated by third parties.

We are not responsible for the privacy, security or content practices of independent third parties.

We encourage you to review the privacy notices and terms of third-party services before providing information directly to them.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

• our services;

• our business practices;

• technologies we use;

• legal or regulatory requirements; or

• the way we process personal information.

When we make changes, we will update the Last Updated date at the top of this page.

Where required by applicable law, we will provide additional notice before materially changing how previously collected personal information is used.

25. Complaints

If you have concerns about how we process personal information, please contact us first so that we can review the issue.

United Kingdom

You may also have the right to complain to the Information Commissioner's Office (ICO), the United Kingdom's data protection regulator.

European Economic Area

If applicable EU data protection law applies to you, you may have the right to lodge a complaint with an appropriate data protection supervisory authority, including an authority in the country where you live or work or where you believe an infringement occurred.

United States

You may also have additional complaint or appeal rights under applicable U.S. state law.

26. Contact Us

For questions about this Privacy Policy, privacy requests or concerns about how we process personal information, contact:

IPLEX DIGITAL LTD
Company Number: 16607265

Office 365, 182–184 High Street North
East Ham
London
E6 2JA
United Kingdom

Email: info@iplexdigital.com
Website: iplexdigital.com