Privacy Policy

The data controller for personal information processed through this website is:

If you are located in the EEA or UK, Cuebiz Technologies Pvt Ltd is the controller responsible for your personal information.

Where required by applicable law, we may appoint an EU representative and/or UK representative. Details of any appointed representative will be published in this section.

Information you provide

When you submit our enquiry form, request a quote, or contact us, we may collect:

• Your name
• Email address
• Phone number
• Current e-commerce platform
• Target e-commerce platform
• Approximate catalogue size
• Business or store details you choose to share
• Message content and any attachments you provide

Information collected automatically

When you visit the website, we may automatically collect limited technical information, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages viewed, referring website, and approximate location derived from IP address
• Date and time of visits

This information helps us understand website usage, improve performance, and maintain security.

Cookies and similar technologies

We use strictly necessary cookies to operate the website. We may also use analytics and preference cookies only with your consent.

When you first visit the website, we present a cookie banner that allows you to:

• Accept all non-essential cookies
• Reject all non-essential cookies
• Manage preferences by category

You may change or withdraw your cookie preferences at any time using the “Cookie Preferences” link in the website footer.

Strictly necessary cookies do not require consent because they are essential for the website to function.

We use the information we collect to:

• Respond to enquiries and provide quotes
• Understand your migration requirements
• Prepare a project scope, timeline, and proposal
• Communicate with you about requested services
• Perform, manage, and support migration engagements
• Improve our website, services, and customer experience
• Maintain records required for business, accounting, and legal purposes
• Protect the website, our systems, and users from fraud, abuse, or security threats

We do not sell your personal information or use it for third-party advertising.

During a migration engagement, we may need access to data from your existing e-commerce platform, such as product, customer, order, image, SEO, or configuration data.

This data is handled under the service agreement signed with your business. We use it solely to perform the agreed migration work, maintain confidentiality, and do not use it for unrelated purposes.

Unless a signed agreement states otherwise, migration-related data is removed from our working systems after the project is completed, subject to any backup, legal, or contractual retention requirements.

For users in the EEA and UK, we process personal information only where we have a valid legal basis under the GDPR and UK GDPR:

• Consent (Article 6(1)(a)): When you submit an enquiry, subscribe to communications, or accept non-essential cookies.
• Performance of a contract (Article 6(1)(b)): When processing is necessary to respond to a quotation request or provide a migration service.
• Legitimate interests (Article 6(1)(f)): To improve our website, maintain security, prevent fraud, keep business records, and follow up on business enquiries. We balance these interests against your rights and expectations.
• Legal obligation (Article 6(1)(c)): Where we must retain records, respond to lawful requests, or comply with tax, accounting, or regulatory requirements.
• Vital interests (Article 6(1)(d)): Only in rare circumstances where processing is necessary to protect someone’s life.

We do not intentionally collect special categories of personal data, such as health, biometric, religious, or political-opinion data. Please do not submit such information through the website unless expressly requested for a project.

We do not sell or rent personal information. We may share personal information only with the following categories of recipients:

• Cloud hosting and infrastructure providers, for website hosting, storage, and application operation.
• Email and communication providers, to receive enquiries and communicate with you.
• Analytics providers, to understand website usage and improve performance.
• E-commerce platforms and migration tools, only where necessary to perform a migration service you have authorised.
• Professional advisers, such as accountants, auditors, or lawyers, where necessary.
• Authorities or third parties, where disclosure is required by law, legal process, or necessary to protect rights, property, or safety.

Any third-party service providers are expected to handle information securely and only for the purposes for which it is shared.

We are based in India and may transfer your personal information to countries outside the EEA and UK, including India and other countries where our service providers or cloud infrastructure operate.

Where we transfer personal information from the EEA or UK to a country not recognised as providing an adequate level of protection, we use appropriate safeguards, such as:

• The European Commission’s Standard Contractual Clauses (“SCCs”)
• The UK International Data Transfer Agreement (“IDTA”) or the UK Addendum to the EU SCCs
• Other lawful transfer mechanisms recognised under applicable data protection law

We also implement supplementary measures where required, including encryption, access controls, and contractual restrictions on data use.

We retain personal information only as long as necessary for the purposes described in this policy:

• Enquiry and quotation data: Up to 24 months after last contact, unless you ask us to delete it earlier or a project proceeds.
• Client and project records: For the duration of the engagement and thereafter as required by contract, tax, accounting, or legal obligations.
• Migration-related store data: Deleted from active working systems after project completion, subject to backup cycles, contractual retention, or legal requirements.
• Security and server logs: For a limited period necessary for security monitoring and incident investigation.
• Cookie consent records: For as long as needed to demonstrate compliance with consent requirements.

We use reasonable technical and organisational measures to protect personal information against unauthorised access, loss, alteration, or disclosure. These measures may include access controls, encryption in transit where appropriate, restricted access to project data, and secure disposal practices.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If a personal data breach is likely to result in a risk to the rights and freedoms of individuals in the EEA or UK, we will notify the relevant supervisory authority within the time required by applicable law. Where the breach is likely to result in a high risk to individuals, we will also inform affected individuals where required.

If you are located in the EEA or UK, you have the following rights under the GDPR and UK GDPR:

• Access: Request confirmation that we process your personal information and obtain a copy of it.
• Rectification: Request correction of inaccurate or incomplete personal information.
• Erasure: Request deletion of your personal information where legally permitted.
• Restriction: Request that we restrict processing in certain circumstances.
• Portability: Receive personal information you provided to us in a structured, commonly used, machine-readable format, where the processing is based on consent or contract and carried out by automated means.
• Objection: Object to processing based on our legitimate interests, including profiling. You have an absolute right to object to direct marketing.
• Withdraw consent: Withdraw consent at any time where processing is based on consent. This does not affect the lawfulness of processing before withdrawal.
• Automated decision-making: We do not make decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise any right, contact privacy@safemigrate.store. We may request identity verification before responding.

You also have the right to lodge a complaint with your local supervisory authority. In the UK, this is the Information Commissioner’s Office (“ICO”): https://ico.org.uk/. In the EEA, contact the supervisory authority in your country of residence or workplace.

The website and services are intended for businesses and adults. We do not knowingly collect personal information from children under the age of 13, or a higher minimum age where required by local law. If you believe a child has provided us with personal information, please contact us so we can delete it.

The website may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing information.

We may update this Privacy Policy from time to time. The effective date at the top of this page shows when the policy was last updated. Material changes will be posted on this page, and continued use of the website after an update constitutes acceptance of the revised policy.

For privacy questions, data-subject requests, or complaints, contact:

If you are in the UK, you may complain to the Information Commissioner’s Office at https://ico.org.uk/. If you are in the EEA, you may complain to your local data protection authority.