Prıvacy Polıcy

PRIVACY POLICY

This Privacy Policy describes how SOVARACRAFT LTD ("SovaraCraft," "we," "us," or "our") collects, uses, discloses, stores, and otherwise processes your personal information when you visit, use, make a purchase from, or otherwise interact with our online store, website, services, advertisements, communications, or customer support (collectively, the "Services").

SOVARACRAFT LTD is a company established in the United Kingdom and is the controller of personal information processed as described in this Privacy Policy, except where another party acts as an independent controller.

Our online store is powered by Shopify.

By using our Services, you acknowledge that your personal information will be handled as described in this Privacy Policy.

This Privacy Policy should be read together with our Terms of Service, Shipping & Delivery Policy, Return & Refund Policy, Cookie preferences and any other notices presented when we collect personal information from you.

1. WHO WE ARE

For purposes of applicable data protection laws, including the UK General Data Protection Regulation ("UK GDPR"), SOVARACRAFT LTD generally acts as the data controller for personal information collected through our store and Services.

Company: SOVARACRAFT LTD
Country of Establishment: United Kingdom
Registered Office: [REGISTERED OFFICE ADDRESS, UNITED KINGDOM]
Privacy Contact: sovaracraft@gmail.com

For privacy-related questions or requests, please contact:

sovaracraft@gmail.com

2. SCOPE OF THIS PRIVACY POLICY

This Privacy Policy applies when you:

  • Visit or browse our website;

  • Purchase or attempt to purchase a product;

  • Add products to your cart;

  • Begin or complete checkout;

  • Contact customer support;

  • Request a return or refund;

  • Communicate with us by email;

  • Subscribe to marketing communications;

  • Interact with our advertisements;

  • Interact with our social media advertising;

  • Use features provided through our Shopify-powered store;

  • Otherwise interact with our Services.

This Privacy Policy does not necessarily apply to websites, applications, platforms, or services operated independently by third parties.

3. PERSONAL INFORMATION WE COLLECT

The personal information we collect depends on how you interact with our Services.

We may collect the following categories of information.

A. Contact Information

This may include:

  • First and last name;

  • Email address;

  • Telephone number;

  • Billing address;

  • Shipping address;

  • Country;

  • State, province, or region;

  • City;

  • Postal or ZIP code.

B. Order & Transaction Information

When you make or attempt to make a purchase, we may collect information such as:

  • Products ordered;

  • Order number;

  • Order date;

  • Order value;

  • Currency;

  • Shipping method;

  • Billing information;

  • Shipping information;

  • Payment status;

  • Fulfillment status;

  • Order history;

  • Return and refund information;

  • Cancellation requests;

  • Customer support information;

  • Delivery and tracking information.

4. PAYMENT INFORMATION

Payments may be processed using services including:

  • Shopify Payments

  • PayPal

  • Stripe

  • Shop Pay

Payment providers may collect and process payment information necessary to complete transactions.

Depending on the payment method, this may include:

  • Cardholder name;

  • Billing address;

  • Payment card information;

  • Payment token;

  • Transaction information;

  • Fraud prevention information;

  • Payment authentication information.

We generally do not directly receive or store your complete payment card number or security code where those details are processed directly by our payment service providers.

Payment providers may process your personal information according to their own privacy policies and legal obligations.

5. INFORMATION WE COLLECT AUTOMATICALLY

When you visit or interact with our website, certain information may be collected automatically.

This may include:

  • IP address;

  • Browser type;

  • Device type;

  • Operating system;

  • Device identifiers;

  • Approximate location derived from IP address;

  • Referring website;

  • Pages viewed;

  • Products viewed;

  • Links clicked;

  • Search activity;

  • Cart activity;

  • Checkout activity;

  • Session information;

  • Date and time of visits;

  • Interaction with advertisements;

  • Cookie identifiers;

  • Pixel identifiers;

  • Other online identifiers;

  • Website performance information.

We and our service providers may collect this information through cookies, pixels, tags, SDKs and similar technologies.

6. COOKIES & SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies.

Cookies are small files or pieces of information stored on or associated with your browser or device.

We may use different categories of cookies and similar technologies.

Strictly Necessary Cookies

These technologies may be necessary for the website to function correctly.

They may support:

  • Shopping cart functionality;

  • Checkout;

  • Payment processing;

  • Security;

  • Fraud prevention;

  • Session management;

  • Privacy preferences;

  • Other essential website functions.

These technologies may operate where necessary to provide the Services you request, subject to applicable law.

Analytics Cookies

With consent where required, analytics technologies may help us understand:

  • How visitors use our website;

  • Which pages are popular;

  • How visitors navigate the website;

  • Website performance;

  • Traffic sources;

  • Conversion performance;

  • How we can improve our Services.

We may use Google Analytics 4 (GA4) for these purposes.

Advertising & Marketing Cookies

With consent where required, advertising technologies may be used to:

  • Measure advertising effectiveness;

  • Attribute purchases or other actions to advertisements;

  • Understand interactions with advertisements;

  • Build or use advertising audiences;

  • Limit repetitive advertising;

  • Deliver or support more relevant advertising.

These technologies may include:

  • Google Ads

  • Meta Pixel / Facebook & Instagram advertising technologies

  • TikTok Pixel

7. COOKIE CONSENT & PREFERENCES

We use Shopify's customer privacy and cookie consent functionality to help manage consent preferences where applicable.

Visitors in certain regions, including the United Kingdom and European Economic Area, may be presented with choices regarding non-essential cookies and similar technologies.

Where consent is legally required, we intend to use non-essential analytics and advertising technologies in accordance with the consent choices available through our website.

You may be able to change or withdraw your cookie preferences through the Cookie Preferences option available on our website.

Withdrawing consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

Please note that disabling certain technologies may affect some website features, analytics, personalization, or advertising functionality.

8. GOOGLE ANALYTICS

We may use Google Analytics 4 to understand how visitors interact with our website.

Google Analytics may process information such as:

  • Device information;

  • Browser information;

  • Approximate geographic information;

  • Website interactions;

  • Page views;

  • Referral information;

  • Cookie or similar identifiers;

  • Other analytics information.

We use analytics information to understand website performance, identify technical issues, understand customer journeys, and improve our Services.

Where required by applicable law, Google Analytics will be used subject to applicable consent choices.

9. GOOGLE ADVERTISING

We may use Google Ads and related Google advertising technologies.

Subject to your consent where required, these technologies may help us:

  • Measure advertising campaigns;

  • Understand whether advertisements result in purchases;

  • Create advertising audiences;

  • Measure conversions;

  • Deliver or support relevant advertising;

  • Improve marketing effectiveness.

Google may process information according to its own privacy practices.

10. META / FACEBOOK & INSTAGRAM

We may use technologies provided by Meta Platforms, including the Meta Pixel, in connection with advertising on Facebook and Instagram.

Subject to consent where required, these technologies may help us:

  • Measure advertising effectiveness;

  • Understand website actions following advertisements;

  • Measure conversions;

  • Build advertising audiences;

  • Deliver or support relevant advertisements;

  • Improve advertising campaigns.

Information processed through these technologies may include browser information, device information, website activity, purchase events and online identifiers.

Meta may process certain information according to its own privacy policies and applicable terms.

11. TIKTOK

We may use the TikTok Pixel and related advertising technologies.

Subject to consent where required, TikTok technologies may help us:

  • Measure advertising performance;

  • Understand interactions with advertisements;

  • Measure conversions;

  • Build advertising audiences;

  • Deliver or support relevant advertising;

  • Improve campaign performance.

TikTok may process information according to its own privacy policies and applicable terms.

12. HOW WE USE YOUR PERSONAL INFORMATION

We may use personal information for purposes including:

Providing Our Services

We may process information to:

  • Process orders;

  • Process payments;

  • Arrange fulfillment;

  • Arrange shipping and delivery;

  • Provide tracking information;

  • Manage returns;

  • Process refunds;

  • Handle cancellations;

  • Respond to customer inquiries;

  • Provide customer support;

  • Communicate important information about an order.

Operating Our Business

We may process information to:

  • Maintain our website;

  • Improve our products and Services;

  • Analyse business performance;

  • Maintain business records;

  • Manage our operations;

  • Troubleshoot technical problems.

Security & Fraud Prevention

We may process information to:

  • Detect fraudulent transactions;

  • Prevent misuse;

  • Protect customers;

  • Protect our business;

  • Protect our website and Services;

  • Investigate suspicious activity;

  • Enforce applicable terms.

Legal & Regulatory Compliance

We may process information where necessary to:

  • Comply with legal obligations;

  • Maintain accounting and tax records;

  • Respond to lawful requests;

  • Establish, exercise, or defend legal claims;

  • Comply with regulatory requirements.

Marketing & Advertising

Subject to applicable law and your consent where required, we may process information to:

  • Send marketing communications;

  • Measure advertising effectiveness;

  • Analyse campaign performance;

  • Create advertising audiences;

  • Support personalized or targeted advertising.

13. LEGAL BASES FOR PROCESSING

Where the UK GDPR, EU GDPR, or similar laws apply, we rely on one or more lawful bases for processing personal information.

Contract

We process certain personal information where necessary to perform a contract with you or take steps at your request before entering into a contract.

For example, we may rely on this basis to:

  • Process your order;

  • Process payments;

  • Arrange delivery;

  • Handle returns;

  • Issue refunds;

  • Provide customer support related to your purchase.

Legal Obligation

We may process personal information where necessary to comply with legal obligations.

This may include:

  • Tax obligations;

  • Accounting requirements;

  • Regulatory requirements;

  • Responding to valid legal requests.

Legitimate Interests

Where appropriate, we may process personal information based on our legitimate interests or those of another party, provided those interests are not overridden by your rights and interests.

These interests may include:

  • Protecting our business;

  • Preventing fraud;

  • Maintaining website security;

  • Improving our Services;

  • Understanding business performance;

  • Managing customer relationships;

  • Establishing or defending legal claims.

Consent

Where required, we rely on your consent for certain activities, particularly:

  • Certain marketing communications;

  • Non-essential cookies;

  • Analytics technologies;

  • Advertising technologies;

  • Certain forms of personalized advertising.

Where processing is based on consent, you may withdraw your consent at any time.

14. EMAIL MARKETING

We may send promotional or marketing emails where you have provided consent or where otherwise permitted by applicable law.

Marketing messages may include:

  • Promotions;

  • Special offers;

  • Product announcements;

  • Store updates;

  • Relevant commercial communications.

You may unsubscribe at any time by using the unsubscribe link included in marketing emails or by contacting:

sovaracraft@gmail.com

Unsubscribing from marketing communications will not prevent us from sending transactional or service-related communications that are necessary in connection with your orders or interactions with us.

For example, we may still send:

  • Order confirmations;

  • Shipping notifications;

  • Delivery updates;

  • Refund information;

  • Security notices;

  • Responses to customer support requests.

15. HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose personal information where reasonably necessary to operate our Services.

Categories of recipients may include:

Ecommerce & Technology Providers

Including Shopify and providers that help us operate our online store.

Payment Providers

Including payment processors and payment services used to complete transactions.

Order Processing & Delivery Service Providers

We may provide information necessary to process, prepare, ship, track, or deliver your order to service providers involved in the order and delivery process.

This information may include:

  • Name;

  • Shipping address;

  • Phone number where necessary;

  • Email address where necessary;

  • Product and order details.

We disclose only information reasonably necessary for the relevant service.

Shipping & Logistics Providers

Information may be provided to postal operators, couriers, carriers, logistics providers and related service providers where necessary to deliver or manage your order.

Analytics Providers

We may disclose or permit access to certain information through analytics technologies such as Google Analytics, subject to applicable consent requirements.

Advertising Partners

Subject to applicable law and consent choices, information may be processed through advertising technologies provided by Google, Meta, TikTok, and similar services.

Professional Advisers

Information may be disclosed where appropriate to accountants, lawyers, insurers, auditors, or other professional advisers.

Authorities & Legal Requirements

We may disclose personal information where required by law or where reasonably necessary to respond to lawful requests, protect rights, prevent fraud, or establish or defend legal claims.

16. SHOPIFY

Our online store is hosted and powered by Shopify.

Shopify provides the ecommerce infrastructure that enables us to offer our Services.

As a result, Shopify may process personal information relating to your interaction with our store.

Depending on the Shopify services and features involved, Shopify may process information such as:

  • Contact information;

  • Order information;

  • Transaction information;

  • Device information;

  • Browser information;

  • IP address;

  • Shopping activity;

  • Checkout information;

  • Other information associated with your interaction with Shopify-powered services.

Shopify may process certain personal information as a service provider/processor for us and, in certain circumstances, for its own purposes as described in Shopify's applicable privacy notices.

You can learn more about Shopify's privacy practices through the Shopify Consumer Privacy Policy available on Shopify's website.

17. PAYMENT PROVIDERS

We use third-party payment providers to facilitate secure transactions.

Depending on the payment option selected, your information may be processed by:

  • Shopify Payments;

  • PayPal;

  • Stripe;

  • Shop Pay;

  • Banks;

  • Card networks;

  • Fraud-prevention and payment-authentication providers.

These organizations may act as processors, independent controllers, or in another role depending on the particular processing activity and applicable law.

Their handling of personal information may also be governed by their own privacy policies.

18. INTERNATIONAL DATA TRANSFERS

SOVARACRAFT LTD is established in the United Kingdom, while our customers and service providers may be located in different countries.

Because we serve customers in the United Kingdom, United States, and European Union, personal information may be processed outside the country in which you live.

For example, information may be transferred to or processed in:

  • The United Kingdom;

  • The United States;

  • Countries within the European Economic Area;

  • Other countries in which our service providers operate.

Where applicable data protection law requires safeguards for international transfers, we will rely on an appropriate transfer mechanism.

Depending on the circumstances, these mechanisms may include:

  • Adequacy regulations or adequacy decisions;

  • Standard contractual clauses;

  • The UK International Data Transfer Agreement;

  • The UK Addendum to applicable standard contractual clauses;

  • Other legally recognized safeguards or permitted transfer mechanisms.

You may contact sovaracraft@gmail.com if you have questions about safeguards applicable to international transfers of your personal information.

19. DATA RETENTION

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including where necessary for:

  • Providing our Services;

  • Processing and maintaining order records;

  • Customer service;

  • Tax requirements;

  • Accounting requirements;

  • Fraud prevention;

  • Security;

  • Operational purposes;

  • Dispute resolution;

  • Establishing, exercising, or defending legal claims;

  • Compliance with legal and regulatory obligations.

The appropriate retention period may depend on:

  • The nature of the information;

  • Why it was collected;

  • Legal requirements;

  • Tax and accounting requirements;

  • Potential disputes;

  • Fraud and security considerations;

  • Our legitimate business needs.

When personal information is no longer reasonably necessary, we may delete, anonymize, or otherwise securely dispose of it, subject to applicable law.

20. DATA SECURITY

We take reasonable technical and organizational measures designed to protect personal information against:

  • Unauthorized access;

  • Unauthorized disclosure;

  • Accidental loss;

  • Misuse;

  • Alteration;

  • Destruction.

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.

You should therefore use appropriate care when transmitting information online.

21. FRAUD PREVENTION & SECURITY

We may process certain information to identify, investigate, prevent, or respond to suspected fraud, abuse, security incidents, or illegal activity.

This may include information relating to:

  • Orders;

  • Transactions;

  • Payment attempts;

  • IP addresses;

  • Devices;

  • Delivery addresses;

  • Previous transaction activity;

  • Other relevant risk signals.

Payment providers, Shopify, financial institutions, and other service providers may also conduct independent fraud-prevention checks.

22. CHILDREN'S PRIVACY & AGE REQUIREMENT

Our Services are intended for individuals 18 years of age or older.

We do not knowingly intend to collect personal information directly from children through our Services.

If you believe that a minor has provided us with personal information without appropriate authorization, please contact:

sovaracraft@gmail.com

We will review the request and take appropriate action where required by applicable law.

23. YOUR PRIVACY RIGHTS

Depending on where you live and applicable law, you may have rights relating to your personal information.

These rights may include the right to:

  • Request access to personal information;

  • Request correction of inaccurate information;

  • Request deletion of personal information;

  • Request restriction of processing;

  • Object to certain processing;

  • Request portability of certain information;

  • Withdraw consent;

  • Object to direct marketing;

  • Request information about how personal information is processed;

  • Lodge a complaint with an appropriate data protection authority.

These rights are subject to applicable legal conditions, exceptions, and limitations.

To exercise a privacy right, contact:

sovaracraft@gmail.com

We may need to verify your identity before completing certain requests.

We will respond within the period required by applicable law.

24. UK & EEA PRIVACY RIGHTS

If UK GDPR or EU GDPR applies to the processing of your personal information, you may have rights including:

Right of Access

You may request confirmation of whether we process your personal information and request access to certain information we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal information.

Right to Erasure

In certain circumstances, you may request deletion of your personal information.

This right is not absolute. We may retain information where permitted or required by law.

Right to Restrict Processing

In certain circumstances, you may request that we restrict the processing of your personal information.

Right to Data Portability

Where applicable, you may request certain personal information in a structured, commonly used, machine-readable format or request its transfer to another controller where technically feasible.

Right to Object

You may have the right to object to processing based on legitimate interests in certain circumstances.

You have the right to object at any time to the processing of your personal information for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

25. AUTOMATED DECISION-MAKING & PROFILING

We may use technologies that assist with:

  • Fraud detection;

  • Payment security;

  • Advertising measurement;

  • Audience creation;

  • Marketing personalization;

  • Website analytics.

Advertising platforms may also use automated systems to determine audiences or advertisements according to their own technologies and privacy practices.

SOVARACRAFT LTD does not currently intend to make decisions based solely on automated processing that produce legal effects or similarly significant effects on you, except where such processing is permitted under applicable law and appropriate safeguards are provided.

26. UNITED STATES PRIVACY RIGHTS

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on your state and whether the relevant law applies to SOVARACRAFT LTD, these may include rights to:

  • Know or access personal information;

  • Correct inaccurate personal information;

  • Delete certain personal information;

  • Obtain a portable copy of certain information;

  • Opt out of certain targeted advertising;

  • Opt out of certain sales or sharing of personal information;

  • Appeal certain decisions regarding privacy requests;

  • Receive equal service regardless of exercising applicable privacy rights.

These rights vary by state and are subject to legal thresholds, definitions, exceptions, and limitations.

Requests may be submitted to:

sovaracraft@gmail.com

27. SALE, SHARING & TARGETED ADVERTISING

We do not sell personal information for money in the ordinary meaning of the word "sell."

However, certain U.S. privacy laws use broader definitions of terms such as "sale," "sharing," or "targeted advertising."

The use of advertising and analytics technologies such as Google Ads, Meta Pixel, or TikTok Pixel may potentially fall within these broader definitions in certain jurisdictions.

Where required by applicable law, we provide mechanisms that allow eligible users to opt out of relevant data uses.

You may also adjust applicable cookie and privacy preferences through the controls available on our website.

28. GLOBAL PRIVACY CONTROL & OPT-OUT SIGNALS

Where required by applicable law and supported by our website or technology providers, we may recognize legally valid browser-based opt-out preference signals, such as Global Privacy Control (GPC).

The availability and effect of such signals may depend on your jurisdiction, browser, Shopify configuration, and applicable law.

29. DIRECT MARKETING

You have the right to stop receiving marketing communications from us.

You may:

Where you withdraw consent or object to direct marketing, we will stop using your personal information for the applicable direct marketing activity as required by law.

This does not prevent us from processing information where necessary for non-marketing purposes such as order fulfillment, customer service, legal compliance, or security.

30. THIRD-PARTY WEBSITES & SERVICES

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy, security, content, or practices of third-party websites or services that we do not control.

We recommend reviewing the privacy policy of any third-party website or service before providing personal information.

31. INFORMATION REQUIRED TO COMPLETE A PURCHASE

Certain personal information is necessary to enter into and perform a purchase contract with you.

For example, we generally need information such as:

  • Name;

  • Delivery address;

  • Contact information;

  • Order details;

  • Required payment information.

If you do not provide information necessary to process and deliver your order, we may be unable to complete the transaction or provide the requested Services.

Optional information will be identified or treated accordingly where appropriate.

32. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to:

  • Our Services;

  • Our business operations;

  • Technologies we use;

  • Service providers;

  • Legal requirements;

  • Regulatory guidance.

When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.

Where required by law, we may provide additional notice or obtain consent before materially changing how we process personal information.

We encourage you to review this Privacy Policy periodically.

33. COMPLAINTS

If you have a concern about how we process your personal information, please contact us first at:

sovaracraft@gmail.com

We will review your concern and respond as appropriate.

If you are located in the United Kingdom and are not satisfied with our response, you may have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

If you are located in the European Economic Area, you may have the right to lodge a complaint with the competent data protection supervisory authority in your country of residence, place of work, or place of the alleged infringement.

Making a complaint does not affect any other rights or remedies available to you.

34. CONTACT US

If you have questions about this Privacy Policy, our privacy practices, your personal information, or wish to exercise an applicable privacy right, please contact:

SOVARACRAFT LTD

Country: United Kingdom
Registered Office: [REGISTERED OFFICE ADDRESS, UNITED KINGDOM]
Privacy & Customer Support Email: sovaracraft@gmail.com

For privacy requests, please use the subject line:

Privacy Request – SOVARACRAFT LTD

Please provide sufficient information for us to identify your request and respond appropriately.

We may request additional information where reasonably necessary to verify your identity and protect personal information against unauthorized disclosure.

SOVARACRAFT LTD
Privacy Policy