Privacy &
cookies.
What we collect when you use this site or send us a request, why we need it, and how to get it deleted. Last updated: 4 November 2026.
Who we are
Sly Fox is a Shopify CRO studio run by Ruslan Skrobotov, self-employed (autónomo) in Spain. We are the data controller for this website, sly-fox-web.com.
For anything about your data, email hello@sly-fox-web.com.
What we collect
- Free store review (the form on the site and in the pop-up): your store URL and email address.
- Audit brief: your name, company, email, store URL and your answers about the store (platform, traffic, order value, goals, tools, budget, timeline and notes).
- Messages you send us by email, WhatsApp or Upwork: your contact details and what you write.
- Usage data, only if you accept cookies: pages viewed, clicks and scrolling, device and browser, approximate location, and which ad brought you here. Microsoft Clarity and Hotjar also record how you move through our pages (heatmaps and session recordings).
Why we use it
- To reply to your request, review your store and send you a proposal. Legal basis: steps you ask us to take before a contract (GDPR art. 6(1)(b)).
- To do the work and invoice it if you become a client. Legal basis: the contract (art. 6(1)(b)) and our tax and accounting obligations (art. 6(1)(c)).
- To see how the site is used and whether our ads work. Legal basis: your consent (art. 6(1)(a)). You can withdraw it at any time in Cookie settings.
We don’t sell your data and we don’t add you to a mailing list.
How long we keep it
Requests and messages from people who don’t become clients: up to 2 years after our last contact, then we delete them. Client records: as long as Spanish tax and accounting law requires. Cookie lifetimes are in the table below.
Who else handles it
- S-Host hosts this website and stores form submissions. Its servers are in Ukraine, outside the European Economic Area.
- Google: Gmail, where our mailbox is, and Google Analytics and Google Ads if you accept cookies. Google may process data in the US under the EU-US Data Privacy Framework.
- Microsoft Clarity and Hotjar: analytics, only if you accept cookies.
- WhatsApp (Meta) and Upwork, if you choose to contact or hire us there. Their own privacy policies apply.
Your rights
You can ask for a copy of your data, or ask us to correct it, delete it, limit or stop using it, or send it to you in a portable format. Email hello@sly-fox-web.com and we will reply within one month. If you think we handled your data wrongly, you can complain to the Spanish data protection authority, the AEPD (aepd.es).
Cookies
On your first visit we ask whether you accept analytics and ad cookies. Nothing from Google, Microsoft or Hotjar loads until you click Accept. If you click Reject, we only save that choice in your browser (localStorage, key sf_consent_v1) so we don’t ask again. You can change your mind at any time in Cookie settings.
| Cookie | Provider | Purpose | Lasts |
|---|---|---|---|
| _ga, _ga_* | Google Analytics | Counts visits and tells sessions apart | 2 years |
| _gcl_au | Google Ads | Measures whether an ad led to a request | 90 days |
| _clck, _clsk | Microsoft Clarity | Heatmaps and session recordings | 1 year / 1 day |
| _hjSessionUser_*, _hjSession_* | Hotjar | Heatmaps and session recordings | 1 year / 30 minutes |
Changes
If we change this policy, we will update the date at the top of this page.