Privacy policy

Last updated: 4 August 2026

1. Who We Are

Tyack Ecommerce Solutions is an Australian ecommerce and digital-services business based in Melbourne, Victoria. We provide services including Shopify and WordPress website builds, ecommerce setup, store migrations, digital marketing, Google Ads, SEO, email automation, audits, mentoring, ongoing support and digital resources.

Our website is hosted on Shopify, which provides the ecommerce platform that allows us to present and sell our services and digital products online.

2. Personal Information We May Collect

The information we collect depends on how you interact with us and the services you request.

Information you provide directly

This may include:

• Your name, business name, email address, telephone number and general location.
• Billing details, transaction information and payment confirmation.
• Information submitted through contact forms, quote requests, live chat, email, social media or consultation bookings.
• Customer-account details where account functionality is enabled.
• Information about your business, website, products, services, goals, advertising activity and project requirements.
• Files, branding, content, feedback, approvals and other materials you provide for a project.
• Account-access information or platform invitations provided so we can complete contracted work.
• Marketing preferences and records of communications with us.

Payment information

Payments are processed through Shopify and third-party payment providers. We may receive transaction details such as the payment status, amount, billing name and limited payment information, but we do not generally receive or store your complete credit-card details.

Information collected automatically

When you use our website, we and our technology providers may automatically collect information such as:

• Your IP address, browser, device type, operating system and approximate location.
• Pages viewed, links selected, referring pages, time spent on the site and website interactions.
• Cart, checkout and purchase events.
• Advertising, campaign and conversion information.
• Cookie identifiers and similar technical information.

Information received from third parties

We may receive information from service providers and platforms involved in operating our business, including Shopify, payment processors, analytics providers, advertising platforms, booking tools, email-marketing services, social-media platforms and professional advisers.

3. Client and Project Data

When providing ecommerce, website or digital-marketing services, we may be given access to information held in a client's Shopify store, website, analytics account, advertising account, email platform, Merchant Centre account, social-media account or another business system.

This may include information relating to the client's customers, orders, website users, advertising audiences or business operations. We use this information only as reasonably required to perform the agreed services, provide support, investigate issues, report on performance or comply with legal obligations.

Clients remain responsible for ensuring that they are authorised to provide us with access to their systems and information. Wherever possible, clients should grant access through official collaborator, user or partner permissions rather than sharing personal passwords.

4. How We Use Personal Information

We may use personal information to:

• Respond to enquiries and recommend an appropriate service or package.
• Prepare quotes, proposals, invoices and project agreements.
• Process purchases, payments, bookings and digital-product delivery.
• Plan, build, manage and support websites, ecommerce stores and digital-marketing projects.
• Communicate about project progress, approvals, account access, handover and support.
• Provide consultations, mentoring, audits, reports and recommendations.
• Operate, maintain, secure and improve our website and services.
• Measure website use, advertising performance and marketing effectiveness.
• Send service communications and, where permitted, marketing communications.
• Detect fraud, misuse, security incidents or unlawful activity.
• Maintain business, tax, accounting and legal records.
• Enforce our agreements and protect our legal rights.
• Comply with applicable laws and lawful requests.

5. Cookies, Analytics and Advertising

Our website uses cookies, pixels and similar technologies to operate Shopify functionality, remember preferences, understand website activity, measure conversions, improve performance and support advertising.

Depending on the services enabled on our website, information may be processed by providers such as Shopify, Google, Meta and email-marketing or analytics platforms. These providers may combine information from our website with information they hold under their own privacy policies.

You can manage cookies through your browser settings and, where available, through the privacy or cookie controls shown on our website. Blocking cookies may affect some website features, checkout functions or the accuracy of saved preferences.

Further information about Shopify's use of personal information is available in the Shopify Consumer Privacy Policy.

6. Marketing Communications

We may send marketing emails or other promotional communications where you have subscribed, requested information, made a purchase or where otherwise permitted by law.

You can unsubscribe from promotional emails at any time by selecting the unsubscribe link in the message or contacting us. Unsubscribing from marketing does not prevent us from sending essential communications about an enquiry, purchase, project, account or support request.

7. When We May Disclose Personal Information

We do not sell personal information as a standalone commercial product. We may disclose information where reasonably necessary to:

• Shopify and providers that host or support our website.
• Payment processors, banks and fraud-prevention providers.
• Contractors and specialist team members assisting with an agreed project.
• Cloud-storage, communication, booking, analytics, advertising, email and customer-support providers.
• Accountants, insurers, lawyers and other professional advisers.
• Government agencies, courts, regulators or law-enforcement bodies where required or authorised by law.
• A purchaser, adviser or relevant party in connection with a proposed or completed sale, restructure or transfer of all or part of our business, subject to appropriate confidentiality and legal requirements.
• Another party where you have directed us or given consent.

Service providers and contractors are expected to use information only for the services they provide or as otherwise permitted by their own legal obligations and applicable policies.

8. Overseas Storage and Processing

Some of the technology and service providers we use operate globally and may store or process personal information outside Australia. The countries involved depend on the providers, systems and services being used and may include locations such as Canada, the United States, countries in Europe and other jurisdictions where those providers operate.

Where personal information is handled overseas, we take reasonable steps appropriate to our role to use reputable providers and protect information in accordance with applicable privacy requirements. Overseas recipients may be subject to privacy laws that differ from Australian law.

9. Security

We take reasonable administrative, technical and organisational measures to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure.

These measures may include access controls, password protection, multi-factor authentication where available, restricted contractor access, reputable cloud providers and the use of platform-based collaborator permissions.

No electronic transmission or storage system is completely secure. Please do not send credit-card numbers, banking passwords or other highly sensitive credentials through ordinary email or contact forms.

10. Data Breaches

If we become aware of a suspected data breach, we will take reasonable steps to contain and assess it. Where notification is required under applicable law, we will notify affected individuals and the relevant regulator.

11. Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to complete and support a project, maintain records, resolve disputes, enforce agreements or comply with tax, accounting and legal obligations.

Retention periods vary depending on the type of information, the service provided, the relevant platform and legal requirements. When information is no longer reasonably required, we may delete, destroy or de-identify it, subject to backup systems and legal recordkeeping obligations.

12. Access, Correction and Other Requests

You may contact us to request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

Depending on where you live and the laws that apply, you may also have rights to request deletion, object to certain processing, restrict processing, withdraw consent or receive a copy of your information.

We may need to verify your identity before acting on a request. In some circumstances, access or another request may be limited or refused where permitted by law. Where appropriate, we will explain the reason.

13. Third-Party Websites and Platforms

Our website may contain links to third-party websites, social networks, apps or platforms. We do not control the privacy practices or content of those third parties. You should review their privacy policies before providing personal information.

14. Public Content and Reviews

If you submit a review, testimonial, social-media comment or other content for public display, the information you choose to publish may be visible to others. Please avoid including confidential or sensitive personal information in public content.

We will seek permission before publishing a private client communication as a named testimonial or case study, unless the content has already been made public by the client.

15. Children's Privacy

Our services are intended for adults and businesses and are not directed to children. We do not knowingly collect personal information from children without appropriate authorisation. A parent or guardian who believes a child has provided personal information may contact us to request its removal.

16. Privacy Complaints

If you have a concern about how we have handled personal information, please contact us using the details below and provide enough information for us to understand and investigate the issue.

We will acknowledge and respond to privacy complaints within a reasonable period. If you are not satisfied with our response and the Privacy Act applies, you may be able to lodge a complaint with the Office of the Australian Information Commissioner.

17. Changes to This Policy

We may update this Privacy Policy when our services, technology, business practices or legal obligations change. The revised policy will be posted on this page with an updated effective date.

18. Contact Us