Prelaunch draft: This policy is awaiting legal review. Checkout is closed.
This policy explains what information Sovrial (“we”, “us”) collects when you visit our website or place an order, how we use it, and the choices you have. By using our site you agree to this policy.
Information we collect
Information you give us
- Order details - your name, email, shipping address, and the items you buy, collected when you check out.
- Messages - anything you send us by email.
- Account details - if you choose to create an account: your email address, an optional name, and your password stored only as a one-way hash (we cannot read it). We also record when you created the account and verified your email, and short-lived random links for verifying your email and resetting your password. An account is optional; you can always check out as a guest.
- Product update requests - when email updates are enabled, your email address, selected product interest, consent wording version, and request, confirmation and unsubscribe timestamps. We also keep subscription and delivery-attempt states and random identifiers used to validate email links.
Payment information
Payments are processed by Stripe. Your card details are entered on Stripe's secure checkout and sent directly to Stripe - we never see or store your full card number. We receive only confirmation of payment and the billing/shipping details needed to fulfill your order. See Stripe's privacy policy.
Information collected automatically
- Technical data - IP address, browser and device type, and basic usage information, used to keep the site secure and working.
- Local storage - your shopping cart is stored in your browser's local storage so it persists between pages. It stays on your device and is not sent to us until you check out.
How we use your information
- To process, support, and ship your order.
- To respond to your questions and provide support.
- If you have an account, to sign you in, show your past orders placed with your verified email (including orders placed as a guest), fill in your email at checkout, and send account emails such as email verification and password reset links. Account emails are not marketing.
- When you request product updates, to send a confirmation email and record your choice. We activate product updates only after you confirm the email link. Placing an order does not subscribe you to marketing emails.
- To prevent fraud and abuse, and to keep the site secure.
- To comply with our legal and tax obligations.
We do not sell your personal information.
Who we share it with
We share information only with the service providers we need to run the store:
- Stripe - payment processing.
- Shipping carriers - to deliver your order.
- Cloudflare - website hosting, security, and D1 storage for subscription records and accounts. Our email forms use rate limiting and, when enabled, Turnstile verification to prevent abuse.
- Resend - the optional customer email provider. When configured, it receives the recipient email address and message content, including confirmation, unsubscribe, email verification and password reset links, to deliver the email. Customer email is not enabled until the sender and required configuration are ready.
- Have I Been Pwned (Pwned Passwords) - when you choose an account password, we check whether it has appeared in a known data breach. Only the first five characters of a one-way hash of the password are sent, never the password itself or your email, so the service cannot tell what the password is.
- Authorities - where required by law.
Cookies and tracking
We use only the cookies and local storage needed for the site to function, such as your browser's shopping cart, your account sign-in session if you sign in, and the owner's sign-in session. We do not use advertising or cross-site tracking cookies. If we introduce optional tracking, we will update this policy and obtain any required consent before enabling it.
Your rights
Depending on where you live (including under the EU/UK GDPR and the California CCPA), you may have the right to access, correct, or delete the personal information we hold about you, and to object to or restrict certain processing. To make a request, email us at the address below and we'll respond within the time the law requires.
If you have an account, you can delete it at any time from your account page after confirming your password. Deleting it removes your account details and sign-in; order records remain, as described below.
You can stop product updates using the unsubscribe link in an email and confirming your choice on the website. Simply opening the link does not change your preferences. This stops all product interests for that email address; it does not stop necessary order or shipping messages. If a link has expired or does not work, email support@sovrial.com for help. Order and shipping email dispatch is still being prepared.
Data retention and security
We keep order information for as long as needed to fulfill the order and meet our legal and accounting obligations, then delete or anonymise it. Order records are kept even if you delete your account, because they are payment and tax records. Account details are kept until you delete your account. An account whose email is never verified is deleted automatically after 7 days. We use reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS).
Confirmation links expire after 24 hours. Expiring a link does not automatically delete the subscription request. Unsubscribed records can remain to preserve your opt-out choice and consent history. Automatic subscription cleanup is not implemented yet; the retention schedule and deletion process will be reviewed before customer email is enabled. You can contact us to request access or deletion.
International transfers
Our providers may process data in countries outside your own. Where that happens, we rely on appropriate safeguards for the transfer.
Children
Our store is not directed to children, and we do not knowingly collect personal information from anyone under 16.
Changes to this policy
We may update this policy from time to time. The “last updated” date above reflects the latest version.
Contact
Questions about your privacy or this policy? Email support@sovrial.com.
Seller: Sovrial LLC, 2627 South Cooper Street, Arlington, Texas 76015. Email support@sovrial.com. Checkout opens once the remaining launch steps are complete.