This policy explains how we process personal data across the EcomIQ website and products, and your rights under the EU GDPR, the UK GDPR, and US state laws including the CCPA/CPRA. Because our products handle data differently, each product also has its own policy:
1. Who we are (data controller)
PBF Piotr Białozor-Fiećko — a sole proprietorship registered in Poland, trading as EcomIQul. Józefa Chełmońskiego 12, 14-200 Iława, Poland
NIP: PL8461552859
Email: support@ecomiq.tools
We are the controller for the personal data described in this policy. For data we process on a merchant’s behalf inside CollectionsIQ, we act as a processor — see the CollectionsIQ Privacy Policy. We are established in the EU and are not required to appoint a Data Protection Officer; you can reach us on any privacy matter at the contact above.
2. Personal data we process
- Website visitors — when you visit ecomiq.tools, our infrastructure provider processes technical data (IP address, browser/device information, pages requested) to deliver and secure the site. With your consent, we use analytics (see Cookies below) to understand site usage.
- Waitlist sign-ups — if you submit the waitlist form, we process your email address (and the product you’re interested in) to contact you about that product and our launch.
- Support & enquiries — if you email us, we process your email address and the contents of your message to respond.
- Product data — handled under the product-specific policies. In summary: CollectionsIQ processes your connected store, advertising, and sales data to provide its features (no end-customer personal data is stored); PixelIQ collects no data at all.
We do not knowingly collect special categories of data, and we do not carry out automated decision-making that produces legal effects on you.
3. Purposes & legal bases (GDPR Art. 6)
| Purpose | Data | Legal basis |
|---|---|---|
| Provide and secure the website | Technical/log data | Legitimate interests (a safe, functional site) |
| Provide the products you use | Account & connected-service data | Performance of a contract |
| Waitlist & product-launch updates | Email, product interest | Consent (withdrawable any time) |
| Analytics to improve the site | Usage data via cookies | Consent |
| Respond to support requests | Email, message contents | Legitimate interests / pre-contract steps |
| Comply with legal obligations | As required | Legal obligation |
4. Cookies & analytics
The EcomIQ website uses strictly necessary technologies required to serve and secure the site. We use, or plan to introduce, optional analytics tools — currently intended to include Google Tag Manager and Google Analytics 4 and/or Amplitude — to understand how the site is used. These set non-essential cookies or similar identifiers.
We set non-essential/analytics cookies only with your consent. Where analytics are enabled, you will be asked to accept or reject them via our cookie banner, and you can change your choice at any time. Until you consent, only strictly necessary technologies are used. You can also control cookies through your browser settings.
5. Sharing & sub-processors
We do not sell your personal data. We share it only with service providers who process it on our behalf under appropriate contracts, and with platforms you choose to connect:
| Recipient | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Website & app hosting, storage, security | USA / global edge |
| The Rocket Science Group LLC (Mailchimp) | Waitlist email management | USA |
| Google (Analytics / Tag Manager) | Website analytics (with consent) | USA / EU |
| Amplitude, Inc. | Website/product analytics (with consent), if enabled | USA |
| Shopify Inc. | App distribution & billing for CollectionsIQ | Canada / global |
| Google (Google Ads API), Meta Platforms, Pinterest, TikTok | Advertising data you connect in CollectionsIQ | USA / global |
We may also disclose data where required by law, to protect our rights or users’ safety, or in connection with a business transfer. This list may change; we will keep it current.
6. International transfers
Some providers are located outside the European Economic Area (e.g. in the United States). Where we transfer personal data internationally, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework where a provider is certified — so that your data remains protected.
7. Retention
We keep personal data only as long as needed for the purpose it was collected: website analytics for a limited period set in the analytics tool; waitlist emails until you unsubscribe or we close the waitlist; support correspondence for as long as needed to handle your request and a reasonable period thereafter. Product-data retention is described in the product policies (CollectionsIQ keeps aggregate metrics on a rolling 90-day window).
8. Your rights
If you are in the EU/EEA or the UK, you have the right to access, rectify, erase, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent at any time (without affecting processing already carried out). You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO, ul. Stawki 2, 00-193 Warsaw); in the UK, the Information Commissioner’s Office (ICO).
If you are a California resident, you have the right to know, access, delete, and correct personal information, and to opt out of the “sale” or “sharing” of personal information, without discrimination. We do not sell your personal information for money. Some analytics/advertising cookies may constitute “sharing” under the CPRA; you can exercise your choice through our cookie banner (Do Not Sell or Share My Personal Information) or by emailing us. You may use an authorized agent to submit requests.
To exercise any right, email support@ecomiq.tools. We will respond within the timeframe required by applicable law and may need to verify your identity. See the Data Deletion page for deletion specifics.
9. Children
The Services are for business use and are not directed to children under 16. We do not knowingly collect personal data from children.
10. Security
We use appropriate technical and organizational measures to protect personal data, including encryption in transit (HTTPS) and encryption at rest for stored credentials. No method of transmission or storage is completely secure, but we work to protect your information and to address incidents promptly.
11. Changes
We may update this policy. We will revise the “last updated” date and, for material changes, provide notice. Please review it periodically.
12. Contact
For any privacy question or request, contact support@ecomiq.tools or write to PBF Piotr Białozor-Fiećko, ul. Józefa Chełmońskiego 12, 14-200 Iława, Poland.
This policy is provided in good faith and accurately reflects our current practices.