Access, security and data export

Do not share passwords or verification codes. Check the domain before signing in and use password recovery when needed. Profile and security shows the options and sessions available to your account; sensitive actions may require an additional identity check.

A sign-in request does not mean your project has been deleted. Keep the page open if it contains unsaved work and follow its instructions. Clarify permission errors with the owner or support; do not bypass them with someone else’s account.

Retain your supplied materials and downloaded documents. The separate-backup policy is weekly and before significant changes, with 30-day retention and quarterly restoration checks. This is not an instantaneous copy of every keystroke and does not replace saving in the account.

Contact the team to agree the recipient, data, formats and access under the contract and export register. Distinguish project files and data, domain, frontend, Shopify account and external services. Transferring the frontend does not transfer Shopify itself or non-transferable licences.

The contract governs the data-retrieval period, at least 30 calendar days where the applicable exit procedure provides for it. Once that period ends, data processed on the client’s behalf is deleted from active systems without undue delay and within 30 days at the latest. If no retrieval period applies, the deadline runs from the end of the processing services.

Backup copies are deleted under the documented rotation schedule and no later than 30 calendar days after deletion from active systems. Until then, they remain protected, isolated from ordinary use and unused for other purposes. If restoration is strictly necessary, required deletions are reapplied before ordinary use resumes. Only documented legal retention duties remain applicable, limited to the necessary data. Confirm the dates with the team and download files before the retrieval period expires.

Records retained for accounting duties, legal claims or security follow separate rules and are not kept as an active service. For access, correction or deletion of personal data, contact info@siti.gratis. A privacy request does not itself terminate the contract.