Privacy Policy
Last updated: June 27, 2026
This Privacy Policy explains how FirstX ("FirstX", "we", "us") collects, uses, shares, and protects personal data when you visit this website or contact us about migrating your store. We are committed to handling your data in accordance with applicable data-protection laws.
1. Who is responsible for your data (Data Controller)
The data controller responsible for your personal data is FirstX.
2. What personal data we collect
We only collect data you actively provide and a minimal amount of technical data needed to operate the site securely. Specifically:
- Contact & inquiry data - your email address and your store URL.
- Technical data - your IP address and the date/time of your submission, recorded with each form submission for security and abuse prevention.
We do not intentionally collect special categories of data, and we ask that you do not send us any.
3. How and why we use your data (purposes & legal bases)
| Purpose | Legal basis |
|---|---|
| Provide the migration service if you engage us | Performance of a contract |
| Keep records, secure the site, and prevent abuse/spam | Our legitimate interests in operating and protecting our business |
| Comply with legal and accounting obligations | Legal obligation |
Where we rely on consent, you may withdraw it at any time (see "Your rights" below). Withdrawing consent does not affect processing carried out before withdrawal.
4. Cookies and tracking
This website does not use advertising, analytics, or tracking cookies, and we do not build profiles of visitors. Fonts and all other site assets are served directly from our own server, so simply visiting this site does not send your data to any third party.
5. Who we share your data with
We never sell your personal data. We share it only with service providers ("processors") that help us operate, and only as needed:
- Google LLC (Google Sheets / Google Workspace) - we store inquiry submissions in a Google Sheet so we can manage and respond to them.
- Hetzner Online GmbH - our hosting provider, where the website runs and a backup copy of submissions is stored.
We may also disclose data where required by law, to enforce our terms, or to protect our rights, property, or safety.
6. How long we keep your data
We keep inquiry data only as long as necessary for the purposes above: typically for the duration of our discussions and as internally needed, after which it is deleted, unless a longer period is required by law (e.g. for tax or accounting records) or to establish, exercise, or defend legal claims. You can ask us to delete your data sooner at any time.
7. Your rights
Depending on where you live, you may have the right to:
- Access - request a copy of the personal data we hold about you;
- Rectification - ask us to correct inaccurate or incomplete data;
- Erasure - ask us to delete your data ("right to be forgotten");
- Restriction - ask us to limit how we use your data;
- Portability - receive your data in a portable format;
- Object - object to processing based on legitimate interests;
- Withdraw consent - where we rely on consent.
To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with your local data-protection supervisory authority if you believe we have handled your data unlawfully.
8. How we protect your data
We apply reasonable technical and organizational measures to protect your data, including transport encryption (HTTPS), access controls, and limiting data collection to what we need. No method of transmission or storage is completely secure, but we work to protect your information and to address any incidents promptly.
9. Children
This site and our services are intended for business owners and are not directed at anyone under 18. We do not knowingly collect data from children.
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date above reflects the latest version. Material changes will be posted on this page.
11. Contact
Questions or requests: [email protected].