Privacy Policy

Last updated: 2026. This policy explains how Storefish ("Storefish", "we", "us") processes personal information in connection with the Storefish platform.

This page is a plain-language template, not a substitute for legal advice. Owner: have this document reviewed by an attorney — and confirm it against the specific data-protection law(s) of every jurisdiction Storefish operates in — before relying on it for a live, paying merchant base.

1. Who is responsible for your data

Storefish is the party responsible for personal information collected through the Storefish platform itself (merchant accounts, the Storefish dashboard, this marketing site). Where a merchant sells to their own buyers on a Storefish-hosted storefront, Storefish processes buyer order data on that merchant's behalf, and the merchant is responsible for their own customers' data — see our Terms of Service and each store's own /store/privacy page.

2. Privacy contact

Our privacy contact can be reached at admin@store.fish. Direct any data-protection request — access, correction, export, deletion, objection to processing — to this address.

3. What we collect, and why

Merchant account data — name, email, store details — to create and run your Storefish account and dashboard.
Billing — Storefish never sees or stores your card number. Card payments are processed by Stripe on a hosted, PCI-compliant page; only a payment token and outcome are returned to Storefish, never the card itself.
Buyer order data — when a customer buys from a Storefish-hosted store, their name, contact details, delivery address and order contents are processed by Storefish strictly on behalf of that merchant, to fulfil and support the order.
Analytics — we log page views with a one-way hashed (SHA-256, truncated) visitor IP so we can show merchants basic traffic counts without storing or tracking any identifiable IP address. We do not set advertising or cross-site tracking cookies.

4. Your rights

Depending on where you're located, you may have the right to request access to, correction of, export of, or deletion of your personal information, and to object to certain processing. Contact our privacy contact above to exercise any of these rights; we will respond within a reasonable time — and confirm we can delete or export your data on request.

5. Retention

We retain account and order data for as long as your Storefish account is active, and thereafter only as required to meet applicable tax and consumer-protection record-keeping obligations (typically up to several years for financial records).

6. Third parties we share data with

To operate the platform, limited data is shared with:

Stripe — payment processing (card tokenization and checkout).
Our shipping/courier partners — parcel delivery (recipient name, address, contact number).
Cloudflare — content delivery, DNS and DDoS protection.
Our cloud hosting provider — server hosting.

We do not sell personal information to any third party.

7. Security

All traffic to Storefish is encrypted in transit (TLS). Passwords are hashed, never stored in plain text. Payout bank details are encrypted at rest. Access to production systems is restricted to platform operators.

8. Complaints

If you believe we have not handled your personal information lawfully, you may raise it with our privacy contact above, or lodge a complaint with your local data-protection authority.