Privacy policy
What we do with your details.
Last updated 5 November 2026
Who we are
Boring Commerce is a performance marketing agency. We run paid advertising for direct-to-consumer brands. This policy covers this website, the application forms on it, and our Shopify app.
What we collect
Only what you type into our forms: your name, email address, phone or WhatsApp number, your brand’s website, your current monthly ad spend range, your category, and anything you write in the message box. We also record which ad or link brought you to the page, so we know which of our own campaigns is working.
Job applications
Job applications are covered by the privacy notice on our careers site, careers.boringcommerce.com/privacy: what we collect when you apply, the talent pool, AI interviews and how to have your application deleted.
Why we collect it
To reply to you, to judge whether we can genuinely help your brand, and to prepare for a strategy call. That is all. We do not sell your details to anyone, and we do not add you to a marketing list without your say-so.
Who can see it
Our own team, and the services we use to run the business: our email provider, our internal client system, and our team messaging tool. They process the data on our behalf and are not allowed to use it for anything else.
Cookies and advertising tools
This site loads the Meta pixel. It tells us how many people arrived from an ad and how many filled the form, and it lets us show follow-up ads to people who visited. It does not read anything you type. You can block it with your browser’s privacy settings, or through your ad preferences on Facebook and Instagram.
Our Shopify app
When a store installs the Boring Commerce app from the Shopify App Store, we read the store’s orders, products, inventory, discounts, store analytics and customer records so we can audit the store and report on its sales. That app does not read customer names, email addresses, phone numbers or addresses. For brands whose advertising we run, the store installs its own Boring Commerce app, which also reads customer contact details; those are stored encrypted, and only our team working on that brand can see them. Our apps only read: they never change anything on the store. When Shopify asks us to delete a customer’s details, we delete them. When a store uninstalls an app we stop reading its data, and when Shopify then asks us to erase the store’s data we delete its customers’ personal details. How we process store data for merchants is set out in our terms of service.
How long we keep it
We keep applications for as long as there is a realistic chance of working together, and up to 24 months after your last contact with us. After that we delete them.
Your choices
Write to us and we will tell you what we hold about you, correct it, or delete it. No reason needed, and no charge.