Privacy Policy

FlowCart Agency (“FlowCart Agency”, “we”, “us”, or “our”) is a Shopify development agency. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or engage us for Shopify design, development, and marketing services.

We are committed to handling your personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth), and — where it applies — the EU/UK General Data Protection Regulation (GDPR) for visitors in those regions. By using our website, you agree to the practices described here.

Information you provide to us

• Contact details you submit through our forms — such as your name, email address, company name, and the contents of your message.
• Project information you share with us during a consultation, quote, or engagement.
• Any information you choose to include when you email us or book a call.

Information collected automatically

• Usage data such as pages visited, time on page, referring URLs, and general interaction with the site.
• Device and technical data such as IP address, browser type, device type, and operating system.
• Cookies and similar technologies used to keep the site working, understand usage, and improve performance. Most browsers let you view, manage, and delete cookies in their settings.

We use the information we collect to:

• Respond to enquiries, quotes, and support requests.
• Provide, deliver, and improve our services and website.
• Send you project updates, and — where you've opted in — occasional newsletters (you can unsubscribe at any time).
• Understand how our website is used so we can make it faster and more useful.
• Meet our legal, accounting, and regulatory obligations, and protect against fraud or misuse.

Where GDPR applies, we rely on the following legal bases: your consent, the performance of a contract, our legitimate interests in running and improving our business, and compliance with legal obligations.

We do not sell your personal information. We may share it only with:

• Trusted service providers who help us operate our business — for example hosting, analytics, email delivery, and customer communication tools — under agreements that require them to protect your data.
• Platforms integral to a project, such as Shopify and Klaviyo, where necessary to deliver the services you've engaged us for.
• Authorities or advisers where required by law, or to protect our rights, safety, and property.

We keep personal information only for as long as necessary to fulfil the purposes described in this policy, including to satisfy any legal, accounting, or reporting requirements. When information is no longer needed, we securely delete or anonymise it.

We use reasonable technical and organisational measures to protect your information against loss, misuse, and unauthorised access. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us using the details below and we'll respond within a reasonable timeframe.

If you are in the EU/UK and believe we have not handled your data appropriately, you also have the right to lodge a complaint with your local data protection authority.

We may process and store information in countries other than your own, including where our service providers operate. Where we transfer data internationally, we take steps to ensure it remains protected in line with this policy and applicable law.

Our website may link to third-party sites and services we don't control. We're not responsible for their privacy practices, and we encourage you to read the privacy policy of any site you visit.

Our website and services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we'll delete it.

We may update this Privacy Policy from time to time. When we do, we'll revise the “Last updated” date at the top of this page. Material changes will be made clear on this page, and we encourage you to review it periodically.