Privacy Policy

Last updated: December 2025

This Privacy Policy explains how ampersandlane ("we", "us", or "our"), based in the United Kingdom, collects, uses, and protects information when you use UploadGadget, our Shopify application.

1. Information We Collect

Information from Shopify Merchants

When you install UploadGadget, we collect:

  • Shop name and domain
  • Contact email address
  • Shop owner name
  • App configuration settings

Information from Store Customers

When customers use the file upload feature on your store, we process:

  • Uploaded files (images, documents, etc.)
  • File metadata (file name, size, type)
  • Order information associated with uploads

2. How We Use Information

We use the information we collect to:

  • Provide, maintain, and improve the UploadGadget service
  • Process and fulfil file upload functionality
  • Manage your subscription and billing
  • Send important service notifications
  • Provide customer support
  • Comply with legal obligations

3. Data Storage and Security

We take the security of your data seriously:

  • All data is transmitted using industry-standard encryption (HTTPS/TLS)
  • Uploaded files are stored securely with our cloud storage provider
  • Files are automatically deleted after your configured retention period
  • We implement appropriate technical and organisational measures to protect personal data

4. Data Retention

We retain data as follows:

  • Uploaded files: Automatically deleted after your configured retention period (default 30 days, up to 365 days depending on your plan)
  • Account information: Retained while your account is active and for a reasonable period thereafter for legal and business purposes
  • Billing records: Retained as required by applicable tax and accounting laws

5. Data Sharing

We do not sell personal data. We may share information with:

  • Service providers: Third parties that help us operate the Service (e.g., cloud storage, payment processing)
  • Shopify: As required for app functionality and billing
  • Legal requirements: When required by law or to protect our rights

6. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Data portability
  • Withdraw consent where processing is based on consent

To exercise these rights, contact us.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place in accordance with UK data protection law.

8. Cookies and Advertising

Our website uses:

  • Essential cookies: Required for basic website functionality
  • Google Ads cookies: We use Google Ads for advertising, which may place cookies on your device to measure ad performance and show you relevant ads across the web. You can opt out of personalised advertising by visiting Google Ads Settings

The UploadGadget app within Shopify operates according to Shopify's cookie policies.

9. Children's Privacy

UploadGadget is not directed at children under 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.