Privacy policy
Last Updated: 10.12.2025
Experts4, Prettifyweb Oleksii Ukrainskyi d/b/a Experts4 ("we", "us", "our", or "Experts4") respects the privacy of every individual whose Personal Data (as defined below) we handle. Please read this Privacy Policy to understand how we may collect Personal Data from you through our website, https://expert4.myshopify.com/, as well as all associated sites linked to our website by Experts4, its subsidiaries, and affiliated companies (the "Site").
By using, visiting, or accessing the Site, registering an account, or by providing Personal Data to us on or through the Site, you consent to the practices described in this Privacy Policy.
§ 1. Interpretation and Definitions
For the purposes of this Privacy Policy, these terms have the following meanings:
Account means the unique account created for you to access our Services or parts of our Services.
Data Controller for the purposes of the General Data Protection Regulation (the "GDPR"), we are the Data Controller of your Personal Data, meaning that we determine the purposes and means by which your Personal Data are, or are to be processed.
Data Subject means any identified or identifiable natural person who is the subject of Personal Data.
Do Not Track (DNT) is a concept that has been promoted by US regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.
Personal Data means any information that, on its own or combined with other information, relates to and identifies, whether directly or indirectly, a living individual.
Services refer to the Site, related technology, and Shopify development and customization work provided directly by Experts4.
Users refer to clients of the Experts4 Platform and visitors to the Site.
§ 2. Collection of Personal Data
We will only collect Personal Data that is necessary for and directly related to the provision of our Services. There are three types of data that we collect:
(I) Information You Provide to Us
We ask for and collect information, including Personal Data, about you when you register an account, submit a project request, or purchase service hours. This information may include, but is not limited to:
- Identification and Contact Data: Your name, company name (if applicable), job title, organization, mailing address, email address, phone number, and country.
- Billing and Compliance Data: Tax identification number, VAT/NIP (if applicable), and billing address.
- Account Log-in Credentials: Your e-mail address or username and password.
(II) Information We Collect Automatically
When you use our Services, we may automatically collect or receive certain information about your usage of our Services (collectively the "Usage Data"). In some countries, including countries in the European Economic Area (the "EEA"), such information is considered Personal Data under applicable data protection laws. This includes:
- Device Information: Your unique device ID, the IP address, your operating system, the type of Internet browser you use, unique device identifiers, and other diagnostic data.
- Log Data: Our servers keep log files that record general data and information each time you call up our Site. This includes the browser types and versions used, the operating system used by the accessing system, and the date and time associated with usage.
(III) Data Collected During Project Execution (Collaborator Access)
To provide the requested development and customization services, you must grant us Shopify Collaborator access. By granting this access, you are consenting to provide our development team temporary access to data within your Shopify store's admin panel, which may include:
- Theme and Code Data: Full access to theme files, Liquid code, and app configurations.
- Business Data: Product details, inventory levels, store settings, system logs, and website activity data necessary to complete the defined scope of work.
- Customer Data: Access to your customer database, order history, and order details, as required for testing or implementation.
This access is strictly limited to the duration of the project and the scope required to fulfill your specific service request. For this data, Experts4 acts solely as a Data Processor, as detailed in § 7.
§ 3. Sensitive or Special Categories of Personal Data
We do not require, collect, or process sensitive or special categories of Personal Data (such as race, ethnic origin, political opinions, or health data).
§ 4. Use of Personal Data
We will only process and use your Personal Data where we are permitted to do so by applicable laws. In particular, we may use the Personal Data we collect or receive for the following purposes:
(i) To Provide, Improve and Develop our Services
- Enables you to access and use our Services;
- Enables us to create, manage, and update your Account;
- Enables us to contact you by email or other equivalent forms of electronic communication regarding updates or informative communications related to the functionalities or contracted services;
- Enables us to maintain and continuously upgrade the quality of our Services;
- Enables us to provide customer service, respond to your inquiries, facilitate payment and refund processing;
- Enables us to assign projects to qualified Experts4 personnel (employees and/or contractors) for contract performance; and
- Enables us to optimize our Services and user experience by performing analytics and research.
(ii) To Provide, Personalize, Measure and Optimize our Marketing
-
Enables us to provide you with news, special offers, and general information about Services and events that are similar to those that you have already inquired about, unless you have opted not to receive such information.
(iii) To Provide a Safe Website for Users and to Safeguard our Services
- Enables us to detect and prevent fraud, spam, abuse, security incidents, and other harmful activities;
- Enables us to comply with and fulfill our legal obligations; and
- Enables us to provide law enforcement authorities with the information necessary for criminal prosecution in case of cyberattacks.
§ 5. Disclosure of Personal Data
We may share your Personal Data in the following situations:
(i) Third Party Service Providers (Data Processors)
We may share your Personal Data with third-party service providers to monitor and analyze your use of our Site, to facilitate payment processing, and for operational support. These third-party service providers have access to your Personal Data only to carry out their specified task on our behalf.
- Analytics: We use services like Google Analytics (https://analytics.google.com/) provided by Google LLC and SmartLook (https://www.smartlook.com/) by Cisco Systems, Inc to track and report website traffic and usage.
- Email Marketing/Notification: We use Shopify (https://shopify.com/) provided by Shopify Inc. and Intercom (https://intercom.com/) provided by Intercom R&D Unlimited Company to send you our marketing and notification emails and messages.
- Payment Processors: We use Shopify (https://shopify.com/) provided by Shopify Inc. for payment processing. We do not store your payment card details, as that information is provided directly to our Payment Processors.
- Operational and Development Tools: We share data with processors used for internal project management and communication, such as Asana (https://asana.com/) provided by Asana, Inc., Front (https://frontapp.com/) provided by frontapp.com, Inc., Slack (https://slack.com/) provided by Slack Technologies, Inc and Intercom (https://intercom.com/) provided by Intercom R&D Unlimited Company.
- Hosting and Security: We use Google Workspace (https://workspace.google.com/) provided by Google LLC, Shopify (https://shopify.com/) provided by Shopify Inc., Cloudflare (https://www.cloudflare.com/) provided by Cloudflare, Inc., for hosting, back-ups, web optimization, and security services.
(ii) Other Disclosures
- Affiliates: We may share your Personal Data with our affiliates, requiring those affiliates to honor this Privacy Policy.
- Business Partners: We may share your Personal Data with our business partners to offer you certain products or services.
- Legal Requirements: Under certain circumstances, we may share your Personal Data where disclosure is legally permissible and necessary to comply with a legal obligation, defend our legal rights, or respond to lawful court orders.
- Business Transfers: We may share or transfer your Personal Data in connection with any merger, sale of our assets, financing, or acquisition.
§ 6. International Transfers
Your information, including Personal Data, is processed at our operating offices (in the EEA) and in any other places where the parties involved in the processing are located. This means that your Personal Data may be transferred to and maintained on computers located outside of your jurisdiction, particularly in the USA (where many of our subprocessors are located).
We only use the services of data processors that are based in third countries if they provide sufficient guarantees by implementing appropriate measures related to data transfers, such as using Standard Contractual Clauses (SCCs).
§ 7. Storage and Retention of Personal Data
We will only retain your Personal Data for as long as is necessary for the purposes set out in this Privacy Policy and to the extent necessary to comply with our legal obligations (e.g., tax/accounting laws), resolve disputes, and enforce our legal agreements and policies. After the termination or expiration of the service agreement, your personal data is stored for the purpose of potential claim determination, pursuit, or defense related to the agreement, and will be deleted after the statute of limitations for claims has expired.
§ 8. Security of Personal Data
We are continuously implementing and updating appropriate technical and administrative measures (including encryption and access controls) to help protect your Personal Data against unauthorized access, loss, misuse, destruction, or alteration. We cannot guarantee its absolute security, and if you believe your Account information has been compromised, please contact us immediately.
§ 9. Privacy Obligations under the GDPR (Legal Basis)
The principal legal grounds that justify our use of your Personal Data are as follows:
- Contract Performance (Article 6(1)(b)): The use of your Personal Data is necessary to enter into or perform our contract with you (e.g., providing the service, managing your account).
- Legal Obligations (Article 6(1)(c)): The use of your Personal Data is necessary for us to comply with legal obligations (e.g., tax/accounting requirements).
- Legitimate Interests (Article 6(1)(f)): The use of your Personal Data is necessary to achieve a legitimate interest (e.g., analytics to improve our services, detecting fraud, archival of correspondence).
§ 10. Access and Correction of Personal Data (Your Rights)
You have the following rights under this Privacy Policy, and by law, if you are within the EEA:
- Right to Access (obtain a copy of your data).
- Right to Rectification (correct incomplete or inaccurate data).
- Right to Object (to processing based on legitimate interest or for direct marketing).
- Right to Restriction (limit the processing of your data).
- Right to Deletion (request us to delete data we have no legal basis to hold).
- Right to Data Portability (receive your data in a structured, electronic format).
- Right to Withdraw Consent (if processing relies on your consent).
- Right to lodge a complaint with a supervisory authority.
To exercise these rights, please contact us directly using the contact information provided below. We may ask you to verify your identity before responding to such requests.
§ 11. Tracking Technologies and Cookies
We use cookies (both "Persistent" and "Session" Cookies) and similar tracking technologies (beacons, tags, and scripts) to collect and track information, improve our service, remember your preferences, and serve targeted advertising (as detailed in § 5).
By using our Site, you consent to the setting of these cookies. You can prevent the setting of cookies through your Internet browser settings. If you do this, not all functions of our Site may be entirely usable.
§ 12. "Do Not Track" Policy and Other Links
- Do Not Track: Our Services do not respond to Do Not Track signals.
- Links to Other Sites: Our Services may contain links to third-party websites. We are not responsible for the content, privacy policies, or practices of any third-party sites.
§ 13. Children's Privacy
We do not direct our Services to individuals under the age of 18, nor do we knowingly collect any Personal Data from individuals under the age of 18. If we become aware that an individual under 18 has provided us with Personal Data, we take commercially reasonable steps to remove such information from our systems.
§ 14. What About Data Related to Your Users or Customers?
In the course of providing our services (via Collaborator access), we will process the personal data of your customers or users (e.g., names, addresses, and order details). For this data:
- The Client is the Data Controller: You determine the purpose and means of processing this data.
- Experts4 is the Data Processor: We act solely on your explicit instructions to fulfill the project scope (e.g., testing a checkout flow, implementing a customer-facing feature).
This relationship is governed by the terms of our service agreement, which acts as the Data Processing Agreement (DPA) required under Article 28 of the GDPR.
§ 15. Changes to this Privacy Policy
We may update our Privacy Policy from time to time. The new Privacy Policy will be posted on this page with the "Last updated" date at the top. You are advised to review this Privacy Policy periodically.
§ 16. Contact Us
For the purposes of this Privacy Policy, we are the Data Controller of your Personal Data:
Prettifyweb Oleksii Ukrainskyi d/b/a Experts4
Ul. Ceramiczna 5c / 58, 03-126 Warsaw, Poland
NIP: 5242785728
VAT ID: PL5242785728
Email: experts4@nexusmedia-ua.com
If you have any questions about this Privacy Policy, you can contact us at the address or e-mail listed above.