Privacy Policy

Last updated: 10 September 2026

Store Doctor is operated by Insight Sessions Ltd ("we", "us", "our"). This policy explains what data we collect when you use Store Doctor, why we collect it, and what we do with it.

Store Doctor is a business-to-business service for Shopify merchants — it is not directed at, or intended for use by, consumers or children. We do not knowingly collect information from anyone under 18.

1. Our role, and our lawful basis for processing

We act in two different roles, depending on the data:

• As a data controller for your own account information (your store name and contact email), which we use to provide and bill for the service you've signed up for. Our lawful basis for this is contract — it's necessary to deliver the service you've requested.
• As a data processor for your store's order and product data, which we access and analyse on your instruction, as the merchant, to generate your diagnostic report. You (or your business) remain the controller of that data.

2. What we collect

When you connect your Shopify store to Store Doctor, we access, directly from Shopify's API:

• Your store name and contact email (from Shopify's shop information)
• Order data from the last 30 days (order count, total value, order dates, traffic source labels) — we do not access individual customer names, addresses, or payment details from your orders
• Product listings (names and variant counts)
• Your storefront's public page-speed performance, via Google's PageSpeed Insights service

We do not process any special category data (such as health, racial or ethnic origin, or religious belief) — the data above does not include this.

We request read-only access to your Shopify store — we cannot make changes to your store, orders, or products.

When you subscribe, Shopify's Billing platform collects and processes your payment details directly, as part of your existing Shopify account. We do not see or store your card details — we only receive confirmation that a payment succeeded or a subscription was cancelled.

3. How we use it

• To generate your diagnostic report, we send the store data above to Anthropic's Claude API, which analyses it and writes the findings shown in your report
• To determine whether you have an active paid subscription
• If you're on a paid plan, to periodically re-check your store's scores in the background and email you if your score drops significantly
• If you're on a paid plan, to send you a monthly summary email of your store's current scores, regardless of whether anything has changed

We do not sell your data, and we do not use it for advertising or share it with third parties beyond the service providers listed in this policy (Shopify, Anthropic, Google PageSpeed, and Resend, our email delivery provider). Some of these providers, including Anthropic, may process data outside the UK/EU, including in the United States. Where this occurs, we rely on appropriate safeguards, such as Standard Contractual Clauses, to protect your data.

4. Where your data is stored

Your Shopify access token and session data are stored securely using Netlify's data storage infrastructure, on servers operated by Netlify. Your access token never reaches your browser — only an app-generated session reference does. All data is encrypted in transit (via HTTPS) and at rest.

5. How long we keep it

We retain your store's access token and connection record for as long as your account remains connected to Store Doctor. If you uninstall Store Doctor from your Shopify admin or contact us to disconnect, we will delete your stored access token and associated data within a reasonable period.

We keep a rolling history of your store's scores and reports for trend tracking — a maximum of the 12 most recent scans and 10 most recent full reports. Older entries are automatically removed as new ones are added.

6. Your rights

If you're in the UK or EU, you have rights under UK GDPR / EU GDPR, including the right to access, correct, request deletion of, or receive a portable copy of your personal data, and the right to object to certain processing. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with your relevant supervisory authority — in the UK, this is the Information Commissioner's Office (ico.org.uk).

7. Cookies and tracking

Store Doctor does not use tracking or advertising cookies. We use browser session state only to keep you logged in to your report while you're using the app.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

9. Contact us

Insight Sessions Ltd
Email: hello@insightsessions.co.uk

← Back to Store Doctor