1) Who we are & contact

Controller: Agmal Samandar trading as Sovushka (sole trader).

Address for privacy matters: 36 Rutherford Way, Bushey, WD23 1NJ, United Kingdom.

Email: info@sovushka.com

2) Information we collect

• Identity & contact: name, email, phone, billing/shipping addresses.
• Order details: items purchased, sizes/engraving specs, gift notes, order value, payment method (tokenised).
• Payment data: processed securely by payment providers; we do not store full card numbers.
• Marketing preferences: newsletter opt-ins, SMS consent, unsubscribe status.
• Support & UGC: messages, reviews, uploaded images (e.g., for bespoke work).
• Device & usage: IP address, device identifiers, pages viewed, events (via cookies/pixels).

We collect information directly from you, via our ecommerce platform (Shopify), and via analytics/advertising partners when consented.

3) How we use your information (lawful bases)

• To provide the store & fulfil orders (create account, take payment, manufacture, ship, returns, warranty). Basis: Contract necessity.
• Customer support and to communicate about orders. Basis: Contract necessity; legitimate interests.
• Personalisation & site improvement (debugging, A/B testing, UX analytics). Basis: Legitimate interests; consent where cookies required.
• Marketing (email/SMS/newsletters, ads remarketing). Basis: Consent; legitimate interests for existing customers as permitted.
• Fraud prevention & security (risk scoring, chargeback prevention). Basis: Legitimate interests; legal obligations.
• Legal & tax compliance (records, HMRC). Basis: Legal obligation.

4) Sharing your information (processors)

We share data with trusted service providers under contract, only as needed to deliver our services:

• Shopify – ecommerce hosting, checkout, payments integrations, security.
• Payment processors – e.g., Shopify Payments/Stripe, PayPal, Apple/Google Pay.
• Shipping & fulfilment – Royal Mail, DHL/other couriers; label & tracking tools.
• Marketing & analytics – Google Analytics 4 (GA4), Meta Pixel, TikTok Pixel, Klaviyo (email/SMS), Elevar (tagging/attribution).
• Fraud & risk – Shopify risk tools; chargeback services.
• Professional services – accountants, legal advisers (where necessary).

We do not sell your personal information. We may disclose data when required by law or to protect our rights.

5) Cookies & similar technologies

We use cookies, pixels and local storage to run the store and measure performance. Categories we use:

• Strictly necessary – cart, checkout, session security.
• Performance/analytics – GA4, first-party analytics.
• Functional – preferences (locale, login).
• Advertising – Meta/TikTok remarketing and conversion tracking.

Your choices: You can manage consent via our cookie banner and your browser settings. Disabling non-essential cookies may impact site performance. You can opt out of Google Analytics with browser add-ons and adjust ad settings with Meta/TikTok accounts.

6) Analytics, ads & communications

• GA4 – anonymised/aggregated reporting; we don’t use GA4 to identify individuals.
• Meta & TikTok Pixels – measure ad performance and show relevant ads when consented.
• Klaviyo – sends emails/SMS you opted into; includes basic engagement tracking (opens/clicks).

Marketing opt-out: Unsubscribe any time using the link in emails/SMS or email us at info@sovushka.com. If you opt out of marketing, we may still send service emails about your orders.

7) Data retention

• Orders & tax records: kept for 6 years (HMRC requirement).
• Customer service messages/UGC: up to 3 years after last interaction.
• Marketing data: until you withdraw consent or we detect inactivity for 24 months.
• Site logs & security: typically 12 months.

We may retain data longer to resolve disputes or meet legal obligations.

8) Security

We use Shopify’s PCI-compliant infrastructure, HTTPS, access controls and encryption where appropriate. No method is 100% secure; you are responsible for keeping account credentials confidential.

9) International transfers

Some providers process data outside the UK/EEA (e.g., Canada/USA). Where transfers occur, we rely on adequacy regulations (e.g., UK–Canada) or standard contractual clauses and supplementary measures.

10) Your rights

Under UK GDPR you can:

• Request access to your personal data.
• Request correction or deletion (where not needed for law/defence).
• Object to or restrict processing (including marketing).
• Data portability (copy in a common format).
• Withdraw consent at any time (where consent is the basis).

To exercise rights, email info@sovushka.com. We may need to verify your identity.

EEA/US residents: Local laws may grant additional rights (e.g., EU/EEA GDPR, California CPRA). We honour valid requests under applicable law.

11) Children

Our site is not intended for children under 13, and we do not knowingly collect their data.

12) Changes to this policy

We may update this policy. We’ll post the new version here with the updated date. Material changes may be notified in-store or by email where appropriate.

13) Questions & complaints

Questions or requests: info@sovushka.com

You can also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you’re unhappy with our response.