This policy explains what information eComStart collects when you read our site, which tools and partners are involved, and what choices you have.
Last updated: October 16, 2026. In short: ecomstart.io is a publishing site. We do not have user accounts, we do not sell products here, and the site has no contact, sign-up, or comment forms, only a search box. We measure how the site is used with Google Analytics, and when you click an affiliate link, the company behind that link may set its own cookies.
Who we are and what this policy covers
eComStart ("eComStart," "we," "us," or "our"), a brand of BSS Commerce, publishes ecomstart.io, an English-language blog and resource library about Shopify and starting an online business. This policy applies to ecomstart.io and its subdomains (the "Site"). It does not cover other websites that we link to, including Shopify and the other companies we recommend. Their own privacy policies apply once you leave the Site.
For the purposes of data protection laws such as the EU and UK General Data Protection Regulation (GDPR), eComStart is the controller of the personal information described in this policy.
Information we collect
Information collected automatically when you visit
When you load or interact with a page, we and the tools described below may receive:
- Your IP address and an approximate location derived from it, such as country or city
- Browser type and version, operating system, device type, screen size, and language
- The pages you view, the page or search result that referred you, links you click, how far you scroll, and how long you stay
- Technical and diagnostic data, such as page errors and request timing
- Identifiers stored in cookies or similar technologies, such as a randomly generated visitor ID
We do not ask you to create an account or to sign in, and we do not collect payment information on the Site.
Information you give us by contacting us
If you email us at hello@ecomstart.io, we receive the contents of your message and the email address you used, plus any other details you choose to share. Please do not share passwords, payment card numbers, or other sensitive information in an email.
Records from earlier orders
eComStart has sold prebuilt Shopify stores and store setup services, with orders and payments handled outside of this Site's current pages (the Site itself no longer takes orders or payments). If you placed an order or arranged a project with us, we may hold the records of it, such as your name, email address, any phone or messaging contact details you gave us, order details, and correspondence about the order. Payments for those orders were processed by third-party payment providers such as PayPal, not through this Site.
Information we do not collect
We do not knowingly collect sensitive personal information (such as health data, government identifiers, or precise location). The Site does not currently contain contact forms, newsletter sign-up forms, or comment forms.
Cookies and third-party tools
The Site is a static website delivered through Cloudflare. We use Google Analytics 4 to measure how the Site is used. It loads through the Google gtag.js script after you first interact with a page (for example by scrolling or clicking) or 10 seconds after the page opens, whichever comes first.
| Tool | Provider | What it does | Cookies or identifiers |
|---|---|---|---|
| Google Analytics 4 | Measures traffic, pages viewed, clicks, and how visitors reach the Site | First-party cookies such as _ga and _ga_* | |
| Cloudflare | Cloudflare | Delivers the Site, caches pages, and protects it from abuse and attacks | Security and performance cookies may be set; Cloudflare processes your IP address and request details |
| Cloudflare Email Routing | Cloudflare | Forwards email sent to hello@ecomstart.io to our inbox | None on the Site; it handles the emails you send us, not site visits |
Cookie names and lifetimes are set by the providers and can change. Your browser's developer tools or cookie settings show what is currently stored on your device.
Affiliate links
Many pages contain affiliate links, mostly to Shopify and to other software and ecommerce services. Our links are routed through Impact.com, an affiliate tracking network. When you click one, Impact, the advertiser (for example Shopify), and their service providers may set cookies or use similar technology on your device to recognize that you came from the Site, so that a sign-up or purchase can be credited to us. We do not control that tracking and do not receive your name, email address, or payment details from it. We receive reports from the network that show the number of clicks and the commissions earned. See our Affiliate Disclosure for how we earn money.
Links that vary by country
Some Shopify offers and links differ by country. To choose the right link, your browser asks Cloudflare which country your connection appears to come from (through the Cloudflare /cdn-cgi/trace endpoint) and keeps the two-letter country code in your browser's session storage until you close the tab. We do not store this on our servers and do not use it to identify you.
Managing cookies
The Site does not currently offer an on-site cookie preferences panel. You can block or delete cookies in your browser settings, use a browser that blocks trackers, or turn on a privacy extension. You can also use provider opt-outs, such as the Google Analytics opt-out add-on and the privacy settings of your Google account. Blocking these tools does not stop you from reading the Site. Our Site does not currently respond to "Do Not Track" browser signals.
How we use information
- To operate, secure, and troubleshoot the Site
- To understand which articles and resources readers find useful, and to improve the content, layout, and speed of the Site
- To measure the performance of our affiliate links
- To answer emails and messages
- To keep records of earlier orders, handle questions about them, and meet legal and accounting obligations
- To detect and prevent fraud, abuse, and security incidents, and to enforce our Terms of Service
We do not make decisions that have legal or similarly significant effects on you by automated means.
Legal bases for visitors in the European Economic Area and the United Kingdom
If the GDPR or UK GDPR applies to you, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Delivering and securing the Site | Legitimate interests in running a secure and reliable website |
| Analytics and affiliate performance measurement | Consent where the law requires it for cookies and similar technologies; otherwise our legitimate interests in understanding and improving the Site and measuring affiliate performance |
| Replying to emails and messages | Legitimate interests in responding to you; steps you ask us to take before a contract |
| Records of earlier orders and projects | Performance of a contract; compliance with legal obligations; legitimate interests in handling disputes |
| Fraud prevention and enforcing our terms | Legitimate interests |
Where we rely on consent, you can withdraw it at any time by changing your browser settings or contacting us. Withdrawing consent does not affect processing that took place before you withdrew it.
How we share information
We do not sell your personal information for money. We share information only as described here:
- Service providers that process data for us, including Google (Analytics), Cloudflare (delivery, security, and email routing), and our hosting provider. They may use the data only to provide their services to us, subject to their own terms.
- Affiliate networks and advertisers such as Impact.com and Shopify, which receive information through the cookies and link parameters described above when you click an affiliate link.
- Payment providers and professional advisers for earlier orders, when needed to resolve a payment question or meet legal duties.
- Authorities and other parties when we believe disclosure is required by law, or necessary to protect rights, safety, or the security of the Site.
- A successor, if eComStart or the Site is part of a merger, acquisition, or sale of assets. We would make sure the new owner honors this policy or tell you about any change.
Some tools described above may use the data they collect for their own purposes, such as Google's product improvement or advertising. Under some laws, such as California's, advertising and affiliate cookies can count as a "sale" or "sharing" of personal information. See "Your rights" below for your choices.
International transfers
eComStart is operated from Vietnam, and our service providers process data in other countries, including the United States and countries in Europe and Asia. If you visit from the EEA, the UK, or another region with transfer rules, your information may be transferred to countries that do not have the same data protection laws as yours. Where required, we rely on safeguards such as the standard contractual clauses or the data protection frameworks that our providers maintain.
How long we keep information
- Analytics: kept for the retention period configured in Google Analytics, then deleted or aggregated automatically.
- Email history: kept for as long as needed to respond and to handle follow-up questions, then deleted or anonymized.
- Records of earlier orders: kept for as long as needed to resolve disputes and for as long as tax, accounting, and other laws require.
- Affiliate tracking data: controlled by the affiliate network and the advertiser under their own policies.
Your rights
Visitors in the EEA and the UK
You have the right to access the personal information we hold about you, correct it, have it erased, restrict or object to our processing of it, receive a portable copy of data you gave us, and withdraw consent where we rely on it. You can also complain to your local data protection authority, such as your national supervisory authority in the EEA or the Information Commissioner's Office in the UK.
California and other US states
Depending on where you live, you may have the right to know what personal information we collect, use, and disclose; to request access to or deletion of it; to correct it; and to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell personal information for money. In the past 12 months we have collected the following categories, as described in this policy: identifiers (such as IP address and cookie IDs), internet and device activity, approximate geolocation, and, if you contact us, contact details and message contents. We do not use or disclose sensitive personal information to infer characteristics about you. We will not treat you differently for exercising your rights.
To limit advertising and affiliate tracking, you can use the browser and provider controls described under "Managing cookies" above.
How to make a request
To exercise any of these rights, contact us through the contact page or email us at hello@ecomstart.io, and tell us which right you want to use and which email address relates to you. We may need to verify your identity before we act on a request, and we will respond within the time required by the law that applies to you. You may use an authorized agent where the law allows it. Because most analytics data is tied to a random cookie ID rather than your name, we may ask you to help us locate it.
Security
The Site is served over HTTPS, and we limit access to the systems and tools described in this policy to people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Children's privacy
The Site is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
Links to other websites
The Site links to websites and services run by others. We are not responsible for their privacy practices. Read the privacy policy of any site you visit, especially before you sign up for an account or make a purchase.
Changes to this policy
We may update this policy when our practices, tools, or legal requirements change. The "Last updated" date at the top shows when it was last revised. If we make a material change, we will highlight it on this page. Please check this page from time to time.
Contact us
If you have questions about this policy or want to exercise your privacy rights, please reach us through the contact page or email us at hello@ecomstart.io.