In accordance with the General Data Protection Regulation (GDPR, Regulation EU 2016/679) and the UK GDPR, Speed Ecom LLP is committed to protecting the personal data of its clients and visitors.
Article 1Data Controller
The controller responsible for processing personal data collected via the speedflytheme.com website and the Speedfly Studio is:
Speed Ecom LLP
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Company number : OC432575
Email : contact@speed-ecom.eu
Applicable legal framework: Speed Ecom LLP is a company incorporated under UK law. As such, it is subject to the UK GDPR (Data Protection Act 2018) for processing the data of UK residents, and to the European GDPR (Regulation EU 2016/679) for processing the data of European Union residents. French residents also benefit from the provisions of the amended French Data Protection Act (loi Informatique et Libertes). Speed Ecom LLP applies the highest level of protection among these three regimes.
Article 2Data Collected and Purposes
2.1 Speedfly Studio
Data: what you write in the Studio (store description, brand name, color, product), the link to a Shopify product if you choose to import it, and your email address if you provide it to retrieve your code.
Purposes: to show you your store preview, generate your copy using AI, create your installation code, and prepare the installation via the SpeedFly One app.
Legal basis: performance of pre-contractual measures taken at your request (Article 6.1.b GDPR). Email is optional.
Do not enter sensitive data or personal data of third parties in the Studio: it is not needed to create a store.
2.2 Subscription Purchase
Speedfly subscriptions are taken out on speed-ecom.eu. Order and payment data are processed there according to the speed-ecom.eu privacy policy. Payment is processed by Stripe; Speed Ecom LLP never stores bank card data.
2.3 Browsing and Analytics Data
Audience measurement: pages visited, clicks on main buttons, scroll depth, visit duration, traffic source, device and browser type.
Usage analytics: Microsoft Clarity heatmaps and session recordings, with input field masking. Without your consent, Clarity operates without persistent cookies.
Purposes: to understand how the site is used, fix friction points, and improve offers.
Legal basis: consent for non-essential cookies and trackers; legitimate interest for security logs.
Article 3Retention periods
| Data category | Retention period | Justification |
|---|---|---|
| Studio requests (code, universe, brand, colour, product) | 3 years from last use | Store installation and follow-up |
| Email address provided in the Studio | 3 years from last contact | Retrieve your code, commercial relationship |
| Browsing data | 13 months maximum for stored identifiers; specific retention period for Microsoft Clarity within its configuration limits | Audience measurement |
| Consent choices | 395 days maximum, after which a new choice is requested | Compliance with and proof of expressed preferences |
Article 4Service providers and data transfers
| Service provider | Country | Purpose | Privacy policy |
|---|---|---|---|
| Vercel, Inc. | United States | Website hosting | vercel.com/legal/privacy-policy |
| Supabase, Inc. | European Union / United States depending on the service | Studio database (codes and requests) | supabase.com/privacy |
| Google Ireland Ltd. (API Gemini) | Ireland / United States | Writing store copy by AI based on your Studio request | policies.google.com/privacy |
| Microsoft Ireland Operations Ltd. (Clarity) | Ireland / United States | Usage statistics, heatmaps and session recordings. The Consent API v2 signal transmits your choice. | privacy.microsoft.com |
| Shopify | Canada / United States | Reading public product information when you paste its link into the Studio | shopify.com/legal/privacy |
| Trustpilot A/S | Denmark | Verified customer reviews (link to the Speed Ecom page) | legal.trustpilot.com |
The website fonts are self-hosted: no requests are sent to Google Fonts. Universe previews may load store fonts from Google Fonts when you view them.
Transfers outside the EU: some service providers are established in the United States. These transfers are governed by the Standard Contractual Clauses approved by the European Commission, or by the EU-US Data Privacy Framework for certified companies.
Article 5Your rights regarding your data
In accordance with the GDPR and the UK GDPR, you have the right to access, rectification, erasure, portability, objection, and restriction of processing.
To exercise these rights, write to contact@speed-ecom.eu specifying your identity. Speed Ecom LLP will respond within a maximum of one month (a period that may be extended to two months in the case of a complex request, with prior notice).
If you believe that the processing of your data does not comply with regulations, you can lodge a complaint with the competent supervisory authority: in France, the CNIL (cnil.fr); in the United Kingdom, the ICO (ico.org.uk).
Article 6Cookies
Strictly necessary storage
Essential for the website to function and to remember your choice. The sf_consent local storage retains your choice for a maximum of 395 days. They are not used for advertising.
Audience measurement
Microsoft Clarity measures visited pages, clicks, and friction points. It receives your choice via its Consent v2 API and does not use persistent cookies when you refuse.
No advertising trackers are used on speedflytheme.com.
Managing your cookies: you can accept or refuse from the banner. The 'Cookie preferences' link at the bottom of each page allows you to change your choice at any time. Refusal does not prevent access to the website or the Studio.
Article 7Data security
Speed Ecom LLP implements appropriate technical and organizational measures to ensure the security and confidentiality of your data: encryption of communications (HTTPS/TLS), data access restricted to authorized personnel only, hosting on secure infrastructure.
In the event of a data breach likely to result in a high risk to your rights and freedoms, Speed Ecom LLP undertakes to inform you as soon as possible and to notify the competent supervisory authority within the statutory 72-hour period.
Article 8Changes and contact
Speed Ecom LLP reserves the right to modify this policy at any time, in particular to comply with any legal, regulatory, or technical developments. The version in effect is the one published on the site on the date of consultation.
For any questions: contact@speed-ecom.eu, or by post: Speed Ecom LLP, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.