01Who is responsible for your data
Scopebit is the data controller for the personal data described here. For any question about this policy, email hello@scopebit.eu. Our company details are on the Legal notice page.
02What we collect
Details you give us when you get in touch or book a call: your name, work email, company, store URL, the budget range you pick and anything you write in the message or project notes.
Usage data, and only if you accept analytics cookies: which pages you view, a rough location based on your IP address, your device and browser, and how you found the site. IP addresses are anonymised.
Emails you send us, and our replies.
We don't collect payment card details on this website.
03Why we use it, and the legal basis
Replying to your enquiry and holding the discovery call you booked. These are steps you asked for before a contract is signed (Art. 6(1)(b) GDPR).
Running client projects, because we need the data to perform the contract (Art. 6(1)(b)).
Seeing which pages people find useful so we can improve the site. This relies on your consent (Art. 6(1)(a)), which you can withdraw at any time from Cookie settings in the footer.
Keeping business records for tax and accounting, which the law requires of us (Art. 6(1)(c)).
04Service providers we use
Vercel Inc. hosts the website. Resend sends our email, booking confirmations included. Google LLC provides Google Calendar for booked calls and, if you consent, Google Analytics. Video calls run on Jitsi Meet (8x8). WhatsApp (Meta) is involved only if you decide to message us there.
If a provider handles data outside the EEA or UK, the transfer is covered by the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or the EU–US Data Privacy Framework, whichever applies.
05How long we keep it
Enquiries and bookings that don't turn into a project: kept for up to 24 months, then deleted.
Client project records and contracts: kept while we work together, then for as long as tax and accounting law requires.
Analytics data: kept for 14 months, after which Google Analytics deletes it automatically.
06Data on client stores
When we work on a client's Magento or Shopify store, we may be able to see that store's customer and order data. In that case we act as a processor for the client under a data processing agreement, and we use the data only to do the work we agreed.
07Your rights
You can ask to see the personal data we hold about you, have it corrected or deleted, restrict how we use it or get a portable copy. You can also object to processing based on legitimate interests. Where we rely on your consent, you can withdraw it whenever you like.
Email hello@scopebit.eu and we'll reply within one month. You also have the right to complain to your data protection authority, such as the ICO in the UK or ANSPDCP in Romania.
08How we protect it
Only the people who need personal data can get to it, and they sign in with strong authentication. All traffic to this site is encrypted. Client logins are kept in an encrypted password manager and changed when the engagement ends.
09Changes to this policy
When the way we handle data changes, we update this page. The date at the top tells you which version you're reading.