Privacy

This site has no analytics, no tracking and no advertising cookies. The only personal data I get is what you send me when you book a call, request the free ad check or email me.

Who is responsible

Matej Mikloš, trading as Ecomsmith
matej@ecomsmith.com
Full business details are on the legal page.

What I collect and why

• When you book a call: your name, email address, store URL and anything you write in the booking form. I use it to prepare for the call and to hold it.
• When you request the free ad check: your email address, your store's address, your Facebook page if you give it, and your IP address. I use them to run the check, send you the review, and stop abuse of the form (one check per email a day, one per connection an hour). The check itself looks only at public information: your active ads in Meta's Ad Library and the public pages they open.
• My monthly findings: the free check comes with my monthly email about what I find in Shopify stores' ads and pages: you tick a box on the form to agree to both. Requesting the check adds your email address and store to my email list. Every email has an unsubscribe link; unsubscribing removes you from the list at any time, and you keep your review.
• When you email me: your email address and whatever the message contains. I use it to reply.
• When you visit the site: the hosting provider keeps standard server logs, such as your IP address and browser type, to run and secure the site.

The legal basis for booking a call, running the ad check you asked for and answering your email is providing what you requested (GDPR Article 6(1)(b)). For the monthly email it is your consent (Article 6(1)(a)), which you give when you request the check and can withdraw at any time by unsubscribing. For server logs and the form's abuse limits it is my legitimate interest in keeping the site and the check running and secure (Article 6(1)(f)). If we work together, invoices and contracts are kept because Slovak accounting and tax law requires it (Article 6(1)(c)).

Who else handles it

• Cal.com runs the booking calendar.
• Netlify hosts the site.
• My email provider stores email correspondence.
• DigitalOcean hosts the server that runs the ad check and keeps your request and review.
• Cloudflare (Turnstile) checks that the form is sent by a person, not a bot.
• Resend sends the review email.
• Kit runs the monthly email list.

The ad check also uses services that see only public information about your store, never your email address: ScrapeCreators (to read your active ads from Meta's Ad Library), Anthropic (an AI model that compares each ad's wording with the page it opens) and Google PageSpeed Insights (to measure your pages' speed).

Some of these companies are based in the United States. Where data leaves the EU, they rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. I don't sell or share your data with anyone else.

How long I keep it

Booking details and emails are kept for up to 12 months after our last contact, unless we start working together. Ad check requests (your email, store, Facebook page and IP address) and your review are deleted automatically after 90 days; the review's link stops working then. You stay on the monthly email list until you unsubscribe. Contracts and invoices are kept for as long as Slovak law requires, currently up to 10 years.

Your rights

You can ask me for a copy of your data, or ask me to correct it, delete it, restrict how I use it, or send it to you in a portable format. You can also object to processing based on legitimate interest. Emailmatej@ecomsmith.com and I'll answer within a month.

If you think I've handled your data wrongly, you can complain to the Slovak data protection authority,Úrad na ochranu osobných údajov, or to the authority where you live.

Last updated October 2026.