Legal
Last updated: September 3, 2026
Workrol is a Shopify Experts agency based at Plaza 2000, Calle 50, Panama City. We design, build and scale Shopify stores for brands in Latin America, Spain and the rest of the world.
We are the controller of the data handled through workrol.com. For anything to do with this policy, write to us at info@workrol.com.
Three kinds, and none of them is collected until you do something first.
To answer you and put together a quote, to do the work if you hire us, to understand how the site is used and improve it, and to meet the legal and accounting obligations that apply to us.
We do not sell data. We do not hand it to third parties so they can advertise to you. We do not make automated decisions about you.
If you write from the European Union or the United Kingdom, these are the GDPR bases we rely on:
We are in Panama and some of our providers are in the United States or the European Union, so your data may be handled outside your country. When the provider sits outside the European Economic Area and the data comes from there, we rely on the European Commission's standard contractual clauses or on whichever adequacy decision applies.
Contact messages that do not turn into a project, up to two years, in case you write again and we want the context of the earlier conversation. Project documentation, for as long as the relationship lasts and then for as long as Panama's tax and accounting obligations require. Technical browsing data, for as long as the platform's analytics keeps it.
You can ask us at any time to tell you what data of yours we hold, to correct it, to delete it, to stop handling it, or to hand it over in a format you can take elsewhere. You can also withdraw your consent whenever you want, without that affecting anything done before.
Write to info@workrol.com and we answer within thirty days at most. If you are in the European Union or the United Kingdom and you think we got it wrong, you have the right to complain to your country's data protection authority.
The site is served encrypted, credentials for client stores live in a password manager, and access to each project is limited to the people working on it. No system is invulnerable, so if a breach ever affected you we would tell you and notify whoever needs notifying within the legal deadlines.
This site is aimed at companies and professionals. We do not ask for and do not want data from anyone under eighteen. If you think some has reached us, write to us and we will delete it.
If we change something, we change the date at the top too. If the change is substantive and affects data you have already given us, we tell you by email before it takes effect.