Workrol

Legal

Workrol is an e-commerce agency. We don't sell products through this site and we don't build profiles of the people who visit it: we use it to explain what we do and to let you write to us. This is everything that happens to your data when you do.

Last updated: September 3, 2026

Who we are

Workrol is a Shopify Experts agency based at Plaza 2000, Calle 50, Panama City. We design, build and scale Shopify stores for brands in Latin America, Spain and the rest of the world.

We are the controller of the data handled through workrol.com. For anything to do with this policy, write to us at info@workrol.com.

What data we handle

Three kinds, and none of them is collected until you do something first.

  • What you write to us. Name, email, brand or store, budget range and whatever message you type. One thing worth knowing: the contact form does not send anything to a server of ours. It opens your email or your WhatsApp with the message already written so you can read it and send it yourself, which means that data travels through the channel you pick and lands in our inbox like any other message.
  • Technical browsing data. Approximate IP address, device and browser type, pages viewed and where you arrived from. It is generated by the Shopify infrastructure this site runs on, and we use it in aggregate to know which pages earn their place and which do not.
  • Project data, if we end up working together. Access to your store, content, catalog and whatever the job needs. That is governed by the services agreement we sign, not by this page.

What we use it for

To answer you and put together a quote, to do the work if you hire us, to understand how the site is used and improve it, and to meet the legal and accounting obligations that apply to us.

We do not sell data. We do not hand it to third parties so they can advertise to you. We do not make automated decisions about you.

Cookies and third-party services

This site carries no advertising cookies and no social media tracking pixels. The ones that are here are the ones the platform needs to work and to measure traffic in aggregate.

Loading the page involves these third parties, each with its own policy:

  • Shopify, which hosts and serves the site and provides the aggregate analytics.
  • Google Fonts, where the typefaces are downloaded from. That download means Google receives the IP address the font is requested from.
  • WhatsApp, when you pick that channel to write to us.
  • Instagram, LinkedIn, YouTube and Facebook, only if you click a link to one of our profiles. Until you do, nothing from those networks is loaded on the page.

Who we share it with

With the providers we need in order to operate: the platform that hosts the site, the mail provider your messages reach us through and, if we work together, the tools we run and invoice the project with. Each one accesses the minimum it needs, under its own confidentiality commitments.

We would also share it if a competent authority legally required us to. Nothing else.

International transfers

We are in Panama and some of our providers are in the United States or the European Union, so your data may be handled outside your country. When the provider sits outside the European Economic Area and the data comes from there, we rely on the European Commission's standard contractual clauses or on whichever adequacy decision applies.

How long we keep it

Contact messages that do not turn into a project, up to two years, in case you write again and we want the context of the earlier conversation. Project documentation, for as long as the relationship lasts and then for as long as Panama's tax and accounting obligations require. Technical browsing data, for as long as the platform's analytics keeps it.

Your rights

You can ask us at any time to tell you what data of yours we hold, to correct it, to delete it, to stop handling it, or to hand it over in a format you can take elsewhere. You can also withdraw your consent whenever you want, without that affecting anything done before.

Write to info@workrol.com and we answer within thirty days at most. If you are in the European Union or the United Kingdom and you think we got it wrong, you have the right to complain to your country's data protection authority.

Security

The site is served encrypted, credentials for client stores live in a password manager, and access to each project is limited to the people working on it. No system is invulnerable, so if a breach ever affected you we would tell you and notify whoever needs notifying within the legal deadlines.

Minors

This site is aimed at companies and professionals. We do not ask for and do not want data from anyone under eighteen. If you think some has reached us, write to us and we will delete it.

Changes to this policy

If we change something, we change the date at the top too. If the change is substantive and affects data you have already given us, we tell you by email before it takes effect.