This Privacy Policy explains how
Soreana (“
Soreana“, “
we“, “
us“, or “
our“) collects, uses, and protects the personal data of people who use our website (
Soreana.co.uk) and our services in the United States. We are committed to handling your personal information lawfully and transparently, in accordance with applicable US privacy laws, including state-level regulations such as the California Consumer Privacy Act (CCPA/CPRA) where applicable. This policy provides clear information about the data we collect, how we use cookies and tracking technologies, how data is processed and shared, and the rights you have regarding your personal information. By using our website or services, you accept the practices described in this Privacy Policy.
Personal Data We Collect
We only collect personal data necessary for the purposes stated in this policy. The types of data we may collect include:
- Identification and contact data: name, billing and shipping address, email address, and phone number.
- Payment information: handled securely by our payment processors. We retain limited information, such as billing address and payment method type.
- Order details: products, order history, status, and correspondence with customer support.
- Account credentials: if you create an account, your username and encrypted password.
- Communication data: messages or requests sent via email or through the contact form.
- Usage and technical data: IP address, browser type, device identifiers, visit time, and site behavior.
- Marketing preferences: email address and opt-in consent status for newsletters or offers.
- Cookies and tracking data: cookies, pixels, or tracking tools that collect usage data for analytics or advertising.
Children: our services are not intended for children under 13 years old. If you believe a minor has submitted personal data, please contact us and we will remove it.
How We Use Your Data
We use your personal data for the following purposes:
- To process and fulfill orders: we use your contact and payment data to process transactions, deliver products, and manage orders.
- To provide customer support: we use your information to respond to requests, resolve issues, and provide support.
- To send marketing communications: with your consent, we send newsletters, promotions, and product updates. You can opt out at any time.
- To improve and personalize our services: we analyze technical and usage data (e.g., via Google Analytics) to improve performance and user experience.
- For targeted advertising: with your consent, we use tracking technologies (e.g., Google Ads pixel) to show relevant ads and measure performance.
- For security and fraud prevention: we monitor for unusual activity to protect against fraud and unauthorized access.
- To comply with legal obligations: we retain certain data for tax, accounting, and consumer protection purposes.
Cookies and Tracking Technologies
Like most websites, we use cookies and similar technologies to improve your experience, analyze site usage, and deliver relevant advertising. Cookies are small text files saved on your device.
Types of Cookies We Use
- Necessary cookies: essential for the site to function (e.g., cart, checkout, secure login). These do not require consent.
- Analytics cookies: help us understand how visitors use the site (e.g., Google Analytics). They collect anonymized data, except for detailed tracking, which requires consent.
- Advertising cookies: used for remarketing and to show ads on platforms such as Google and Meta (Facebook). These are only set with your consent.
Managing Cookies
You can manage cookie preferences through our cookie banner or your browser settings. Disabling cookies may affect some site functionality (e.g., checkout).
For more information:
Note: advertising and analytics cookies are only activated if you provide consent through the cookie banner.
Sharing of Personal Data
We never sell your personal data. However, we may share it with trusted third parties when necessary to operate our business and meet legal obligations.
Who We Share Data With
- Service providers:
- Shopify: our e-commerce platform. Data (orders, accounts) is stored securely on their servers.
- Payment processors: we use Stripe, PayPal, Klarna, or other providers shown at checkout to process payments securely. We do not store full card details.
- Carriers: such as USPS, UPS, FedEx, or other carriers used to deliver orders. Data shared includes name, address, and contact details for delivery and tracking.
- Email services: providers such as Klaviyo (if you choose to subscribe) for marketing communications. We have data processing agreements in place with our processors.
- Analytics and advertising: services such as Google Analytics or Meta (Facebook) to improve and promote our services (only with your consent).
- Professional advisors: accountants, auditors, or legal advisors may access data as needed, under confidentiality obligations.
- Competent authorities: if required by law or court order (e.g., tax, fraud investigations, data breach notifications).
- Business transfers: in the event of a sale or reorganization, data may be shared with new owners under confidentiality terms and only for the purposes stated.
Sharing is limited to what is strictly necessary. Third parties are contractually obligated to protect your data and not use it for their own purposes.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or to meet legal, regulatory, or accounting obligations.
- Order data: retained for at least 6 years for tax and accounting purposes.
- Account data: retained while the account is active; if deleted or inactive, we remove or anonymize where appropriate.
- Marketing data: retained until you unsubscribe or withdraw consent; we record the opt-out to prevent further contact.
- Support messages: retained as long as needed to resolve requests, then securely deleted.
- Analytics data: aggregated and anonymized where possible for statistical use.
At the end of retention periods, data is securely deleted or anonymized.
Your Rights
Depending on your state of residence, you may have the following rights regarding your personal data:
- Right to access: request a copy of the personal data we hold about you.
- Right to correction: request correction of inaccurate or incomplete data.
- Right to deletion: request deletion of your data, where legally permitted.
- Right to opt out of sale/sharing: request that we do not sell or share your personal data (note: we do not sell personal data).
- Right to limit use of sensitive data: request that we limit the use of sensitive personal information.
- Right to opt out of marketing: unsubscribe from marketing communications at any time.
- Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.
You can exercise these rights at any time by contacting us (see “Contact Us” section). We may require identity verification before fulfilling the request.
We respond to valid requests within 45 days. If the request is complex, we may take additional time and will notify you accordingly.
Data Security
We implement appropriate security measures to protect your data, including encryption, secure servers, and restricted access. However, no system is 100% secure. We encourage you to protect your account credentials and not share them with third parties.
Complaints
If you believe your personal data has been misused, we encourage you to contact us first so we can resolve the issue. You may also have the right to file a complaint with your state attorney general’s office or the applicable consumer protection authority in your state.
For California residents, you may also contact the California Privacy Protection Agency (CPPA) at
https://cppa.ca.gov.
Contact Us
For any questions about this Policy or how we handle your personal data, you can contact us here:
Customer Service Hours:
Monday – Saturday: 09:00 – 17:00 (UTC-6)
Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal or operational changes. The most recent version will always be posted on this page. If there are significant changes, we may notify you via email or through the website.
Thank you for choosing
Soreana and for the trust you place in us to handle your personal data.