Privacy Policy

Scenox Commerce is an ecommerce operations service run by Scenox Studios. This policy explains how we handle personal information on this website and when we deliver services to our clients. Questions go to commerce@scenoxstudios.com.

For website visitors and enquiries, we decide how your information is used (we are the “controller” or “data fiduciary”).

For our clients’ customer data (for example email subscribers, WhatsApp contacts, order details and support conversations), we act on the client’s instructions as their service provider (a “processor”). The client remains responsible for having a lawful basis and, where required, consent to contact their customers. If you are a customer of one of our clients, please contact that store first; we will help them respond.

• What you send us through forms: name, work email, phone, company, website, details about your store and catalog, and any files you upload.
• Basic technical data our hosting provider records to run and protect the site, such as IP address, browser and pages requested.
• Your region choice, and, only if you allow it, analytics and advertising data (see Cookies below).

To deliver our services we may process, on a client’s behalf:

• Product and store data: catalogs, prices, stock, images and store exports.
• Customer contact details, such as email addresses and WhatsApp numbers, for flows and campaigns the client has asked us to run.
• Order and delivery details, for order updates, cash-on-delivery confirmation and order-status answers.
• Support conversations handled by the AI support agent, including messages handed to the client’s team.

We use this data only to provide the client’s services. We do not sell it, use it for our own marketing, or use it to train third-party AI models. Marketing messages go only to people the client tells us have opted in; every email includes an unsubscribe link and WhatsApp messages honour opt-outs. At the end of an engagement we delete or return the client’s data on request.

• To reply to enquiries, scope projects, prepare quotes and deliver the services you buy.
• To run, secure and improve this website.
• With your consent only: to measure site usage (analytics) and our advertising.

Where laws such as the UK and EU GDPR apply, we rely on: steps you ask us to take before a contract, and performing that contract (enquiries and projects); our legitimate interest in running and securing the site; and your consent for analytics and advertising cookies, which you can withdraw at any time.

Necessary cookies keep the site working. Analytics and advertising cookies are off until you allow them in the cookie banner, and you can change your choice any time with “Cookie settings” in the footer.

scx_market

NECESSARY · 12 MONTHS

Remembers your region so you see prices in your currency.

scx_consent

NECESSARY · 12 MONTHS

Remembers your cookie choices.

Form drafts (session storage)

NECESSARY · UNTIL YOU CLOSE THE TAB

Keeps a form you are filling in if you reload the page.

_ga, _ga_*

ANALYTICS (ONLY WITH CONSENT) · UP TO 2 YEARS

Google Analytics: counts visits and how pages are used.

_fbp

ADVERTISING (ONLY WITH CONSENT) · UP TO 90 DAYS

Meta Pixel: measures and improves our ads.

We do not sell personal information. We share it only with providers who help us run the site or deliver services, under confidentiality and data-protection terms:

• Website hosting and delivery (Vercel).
• Email delivery, for enquiries and for client email flows.
• Meta, for the WhatsApp Business Platform used in client messaging, and for the Meta Pixel if you allow advertising cookies.
• Google, for Google Analytics if you allow analytics cookies.
• AI model providers used in our pipeline, which process data only to return results to us.

We may also disclose information where the law requires it.

Our providers may process data outside your country, including in the United States and India. Where the law requires it, we rely on recognised safeguards such as standard contractual clauses.

Enquiries and project information are kept for as long as needed to respond, deliver and support the project, and to meet legal and accounting obligations, then deleted. Client data is kept for the engagement and deleted or returned on request when it ends. Cookie durations are listed above.

We use access controls, encrypted connections and scoped, least-privilege store access. We never ask for store passwords through public forms. See Data Handling for how project files are handled.

Depending on where you live, you can ask to access, correct, delete or receive a copy of your information, object to or restrict some uses, and withdraw consent. This includes rights under India’s Digital Personal Data Protection Act 2023, the UK and EU GDPR, Australia’s Privacy Act 1988 and US state privacy laws such as California’s. Email commerce@scenoxstudios.com and we will respond within the time the law allows.

You can also complain to your regulator, for example the Data Protection Board of India, the UK Information Commissioner’s Office, or the Office of the Australian Information Commissioner.

This website and our services are for businesses and are not intended for children.

We will update this policy when our services or the law change. The date at the top shows the latest version.

Questions or requests about privacy: commerce@scenoxstudios.com.