Privacy Policy & Data Governance Notice
1. Introduction & Data Controller Details
EightyFive Engineering ("EightyFive", "we", "us", or "our"), with registered operational offices at 4 Crown Place, London EC2A 4BT, United Kingdom, operates the diagnostic intelligence portal at audit.eightyfive.cloud and provides storefront performance engineering, Core Web Vitals optimization, and server-side tracking architecture.
We act as a Data Controller under the United Kingdom General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the European Union General Data Protection Regulation (EU GDPR), and the California Consumer Privacy Act (CCPA). You can contact our data governance team at [email protected].
EightyFive specializes strictly in frontend code efficiency, liquid template optimization, and server-side event routing. We do not collect, process, export, or store your store customers personally identifiable information (PII) or credit card details. All live checkouts, payment processing, and customer databases remain entirely within your native e-commerce platform and verified payment gateway.
2. Storefront Diagnostics & Public Asset Auditing
Our automated systems and diagnostic tools inspect publicly available web storefronts to measure mobile page response latency (TTFB), total script count, render-blocking resources, Core Web Vitals (LCP, INP, CLS), and public analytics tags (Meta Pixel, GA4, TikTok, Klaviyo).
Lawful Basis for Processing: We process public technical storefront data under Article 6(1)(f) of the UK and EU GDPR (Legitimate Interests). Our legitimate interest is providing commercial e-commerce brands with objective performance benchmarking, identifying conversion-draining technical latency, and offering infrastructure engineering services.
3. Diagnostic Crawler Identification & Opt-Out
Our diagnostic crawler identifies itself using the standard HTTP User-Agent header:
EightyFiveDiscoveryBot/2.0 (+https://eightyfive.cloud; [email protected])
Our scanner strictly adheres to respectful request rates (maximum 1 request per 3 to 5 seconds) and never overburdens merchant servers. If you are a merchant and wish to permanently exclude your domain from our diagnostic audits and index, email [email protected] with the subject "Exclude Domain". Your domain will be immediately placed on our permanent exclusion ledger.
4. B2B Communications & Anti-Spam Safeguards
When public commercial contact details are published on an e-commerce website (such as within a published contact page, imprint, or privacy notice), we may send a single, personalized technical performance summary to business stakeholders regarding their storefront latency.
We maintain an immutable sent history ledger to guarantee that prospects never receive repeated initial outreach messages. Every communication includes an immediate opt-out link. When you request to unsubscribe or decline services, your email and domain are permanently logged to prevent future contact.
5. Technical Collaborator Access & Zero-Trust Security
During a Speed Sprint or Tracking Architecture engagement, clients provide temporary collaborator access to their e-commerce environment:
- Least Privilege Access: We request collaborator permissions strictly limited to theme files and storefront code.
- Zero Master Passwords: We never accept, store, or solicit master administrative passwords. Access is granted and revocable through official Shopify Collaborator permissions.
- Duplicate Staging Build: All code modifications are conducted in a duplicate staging sandbox or backup theme. Code is never deployed to live production without your explicit review and benchmark confirmation.
6. Data Retention & International Security
Diagnostic performance metrics and client communication records are hosted on secure, encrypted edge infrastructure located in the United Kingdom and Western Europe. We do not sell, rent, or monetize client data. Technical audit records are retained for historical benchmarking and performance warranty enforcement, and are permanently purged upon request.
7. Your Rights Under UK & EU GDPR
Under applicable data protection laws, you possess the following statutory rights:
- Right to Access: Request a copy of the information we hold regarding your business contact details.
- Right to Rectification: Request correction of any inaccurate or incomplete records.
- Right to Erasure: Request the permanent deletion of your contact records and audit history.
- Right to Object: Object at any time to the processing of your data for B2B direct outreach.
To exercise any of these rights, contact our governance team at [email protected]. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.
8. Cookies & Tracking Notice
The audit.eightyfive.cloud portal does not deploy invasive third-party cross-site advertising cookies or commercial tracking pixels. We use only strictly necessary functional session storage required for page navigation and diagnostic lookups.
9. Contact & Governance Enquiries
For any questions regarding this Privacy Policy, data governance practices, or domain exclusion requests, contact:
EightyFive Engineering
4 Crown Place, London EC2A 4BT, United Kingdom
Telephone: +44 7735 635419
Email: [email protected]