Privacy policy

Privacy Policy

Last updated: September 13, 2026

This Privacy Policy describes how SOVY ("SOVY", "we", "us", or "our") collects, uses, discloses, stores, and otherwise processes personal information when you visit, use, make a purchase from, or otherwise interact with our website, store, products, services, or customer support (collectively, the "Services").

Our online store is powered by Shopify. Shopify provides the ecommerce infrastructure that allows us to offer the Services.

This Privacy Policy is intended to provide information about our privacy practices. It does not constitute consent to processing where consent is required under applicable law.

1. Data Controller and Contact Details

For purposes of applicable data protection laws, the controller responsible for your personal information is:

Trading name: SOVY
Business address: Calle Esteban de Ágreda, 26007 Logroño, La Rioja, Spain
Email: sovysleep@outlook.com

Where applicable, additional legally required business identification information is made available through our Legal Notice, Terms of Service, or other information displayed on the website.

2. Personal Information We Collect

Depending on how you interact with the Services, we may collect or process the following categories of personal information:

  • Contact information, including your name, email address, telephone number, billing address, and shipping address.

  • Order and transaction information, including products viewed or purchased, order history, returns, refunds, cancellations, shipping information, and transaction status.

  • Payment information. Payment information is processed by Shopify and/or our payment service providers. Depending on the payment method used, we may receive limited payment-related information such as payment status, payment method, card type, or limited card identifiers. We generally do not directly store complete payment card details.

  • Account information, including login details, account preferences, and settings where customer accounts are available.

  • Communications, including messages, emails, customer service requests, complaints, reviews, and other information that you choose to provide to us.

  • Device and technical information, including IP address, browser type, device type, operating system, network information, identifiers, and related technical data.

  • Usage information, including interactions with our website, pages viewed, products viewed, items added to a cart, referral information, and browsing activity.

  • Marketing and advertising information, including marketing preferences and, where permitted, information used to measure or personalize advertising.

We do not intentionally request sensitive categories of personal information unless necessary and permitted by applicable law.

3. How We Obtain Personal Information

We may obtain personal information:

  • directly from you when you visit our website, place an order, create an account, contact us, submit a review, request a refund, or otherwise interact with us;

  • automatically through cookies, pixels, local storage, and similar technologies;

  • from Shopify and other service providers that support our store;

  • from payment processors;

  • from shipping, logistics, fulfillment, manufacturing, and dropshipping partners;

  • from advertising, analytics, fraud prevention, and marketing providers; and

  • from other third parties where permitted by applicable law.

4. How and Why We Use Personal Information

We process personal information only where we have an appropriate legal basis under applicable law.

Fulfilling Orders and Providing the Services

We use personal information to:

  • process and confirm orders;

  • process payments;

  • arrange manufacturing, fulfillment, shipping, and delivery;

  • provide order and shipping updates;

  • manage returns, refunds, exchanges, and cancellations;

  • maintain customer accounts; and

  • provide customer support.

For customers in the European Economic Area ("EEA") and United Kingdom ("UK"), this processing is generally necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

If you do not provide information that is necessary to process an order, such as your name, delivery address, or required payment information, we may be unable to complete the transaction.

Fraud Prevention and Security

We may use personal information to detect, investigate, prevent, or respond to fraudulent, abusive, illegal, malicious, or unauthorized activity and to protect our customers, business, website, payment systems, and other users.

Where applicable, we rely on our legitimate interests in protecting our business, customers, systems, and transactions, as well as compliance with legal obligations.

Customer Support and Communications

We process personal information to respond to questions, complaints, order issues, refund requests, disputes, chargebacks, and other communications.

Depending on the circumstances, this processing may be necessary to perform our contract with you, comply with legal obligations, or pursue our legitimate interest in providing customer service and managing our business.

Legal and Regulatory Compliance

We may process and retain information where necessary to:

  • comply with tax, accounting, consumer protection, ecommerce, product safety, customs, sanctions, fraud prevention, and other applicable legal obligations;

  • respond to lawful requests from courts, regulators, law enforcement agencies, and other competent authorities;

  • establish, exercise, or defend legal claims; and

  • enforce our Terms of Service and other policies.

This processing is based on compliance with legal obligations and, where applicable, our legitimate interests in protecting and enforcing our legal rights.

Marketing

Where permitted by law, we may use your contact information to send marketing or promotional communications.

Where consent is required, we will rely on your consent. Where applicable law permits marketing to existing customers on another lawful basis, we may rely on that basis subject to applicable requirements.

You may unsubscribe from marketing emails at any time by using the unsubscribe mechanism provided in those communications.

Unsubscribing from marketing does not prevent us from sending non-promotional communications relating to an order, transaction, account, legal notice, or customer service matter.

Analytics, Personalization, and Advertising

We may use analytics and advertising technologies to understand how visitors use our Services, improve our store, measure advertising effectiveness, and, where permitted, personalize advertising.

Where applicable law requires consent for non-essential cookies or similar technologies, we rely on consent and will not intentionally activate those technologies until the required consent has been obtained.

You can modify eligible privacy choices through the cookie or privacy controls available on our website.

5. Cookies and Similar Technologies

We and service providers such as Shopify may use cookies, pixels, tags, local storage, and similar technologies.

Some technologies are necessary for the website to function, including technologies used for shopping carts, checkout, security, fraud prevention, account functionality, and payment processing.

Other technologies may be used for analytics, advertising, personalization, or measurement and may require your prior consent depending on where you reside.

Where required by law, you will be given the ability to accept or reject non-essential cookies and adjust your preferences.

Withdrawal of consent does not affect the lawfulness of processing performed before consent was withdrawn.

6. Dropshipping, Fulfillment, and Shipping Partners

Because we operate an ecommerce business that may use third-party fulfillment, manufacturing, warehousing, shipping, and dropshipping providers, certain personal information must be disclosed to these providers in order to fulfill and deliver your order.

This information may include:

  • your name;

  • shipping address;

  • telephone number where required for delivery;

  • email address where required for order or delivery communications;

  • products and quantities ordered;

  • order reference information; and

  • information required for customs, import, export, or delivery purposes.

We disclose only the information reasonably necessary for the relevant service.

Depending on the product, destination, and fulfillment arrangement, a fulfillment provider or supplier may be located in a country different from your country of residence, including countries outside the EEA or UK.

Where required by applicable data protection law, we take appropriate steps to ensure that service providers processing personal information on our behalf are subject to appropriate contractual and data protection obligations.

7. How We Disclose Personal Information

We may disclose personal information to:

  • Shopify, which hosts and operates the ecommerce infrastructure supporting our store;

  • payment processors and financial service providers for payment processing, fraud prevention, and transaction management;

  • manufacturers, suppliers, warehouses, dropshipping providers, fulfillment providers, couriers, postal services, and logistics companies in order to process and deliver orders;

  • IT, hosting, cloud, security, and fraud prevention providers;

  • analytics and advertising providers, where permitted by applicable law;

  • email, SMS, and customer communication providers;

  • customer support and review platforms;

  • professional advisers, including accountants, legal advisers, insurers, and auditors where appropriate;

  • government authorities, courts, regulators, customs authorities, tax authorities, and law enforcement agencies where required or permitted by law; and

  • a purchaser, investor, successor, or other relevant party in connection with a potential or completed merger, acquisition, sale, restructuring, financing, insolvency, or transfer of all or part of our business.

We may also disclose information where you specifically request or authorize us to do so.

8. Relationship With Shopify

Our store is hosted by Shopify.

Shopify collects and processes personal information relating to your access to and use of our store in order to provide and improve Shopify's services.

Information submitted through our store may therefore be transmitted to Shopify and other parties that may be located outside your country of residence.

Where Shopify acts as our processor, Shopify processes customer personal information on our behalf in accordance with the applicable contractual arrangements between us and Shopify. For certain Shopify services or features, Shopify may process personal information for its own purposes as further explained in Shopify's privacy documentation.

If Shopify Network Intelligence or other Shopify Enhanced Services are enabled, information about your interactions with our store may also be processed by Shopify to provide enhanced personalization, analytics, measurement, fraud prevention, and advertising-related functionality.

You can learn more about Shopify's privacy practices through the Shopify Consumer Privacy Policy and Shopify Privacy Portal at:

https://www.shopify.com/legal/privacy/app-users

https://privacy.shopify.com/en

9. Targeted Advertising and Sale or Sharing Under Certain U.S. Privacy Laws

We do not sell personal information in exchange for money.

However, certain disclosures or uses of personal information for advertising, analytics, or cross-context behavioral advertising may be legally considered a "sale," "sharing," or use for "targeted advertising" under certain U.S. state privacy laws.

Where applicable, you may have the right to opt out of such processing.

You can exercise eligible opt-out rights through:

https://sovysleep.com/pages/data-sharing-opt-out

Where required, we may also recognize legally valid browser-based opt-out mechanisms such as Global Privacy Control.

10. International Transfers of Personal Information

Our business, Shopify, and some of our suppliers or service providers may operate internationally.

As a result, personal information may be transferred, stored, or processed outside the country in which you live, including outside the EEA or UK.

Where personal information protected by European or UK data protection laws is transferred to a country that has not been recognized as providing an adequate level of data protection, we will use an appropriate transfer mechanism where required by law.

Depending on the circumstances, these safeguards may include:

  • an adequacy decision;

  • European Commission Standard Contractual Clauses;

  • the applicable UK international data transfer mechanism;

  • another legally recognized transfer mechanism; or

  • an applicable statutory exception where permitted by law.

You may contact us for additional information regarding the safeguards applicable to relevant international transfers.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required or permitted by applicable law.

Retention periods depend on factors including:

  • the duration of our relationship with you;

  • the need to fulfill an order or provide customer service;

  • tax, accounting, commercial, consumer protection, and other legal retention requirements;

  • fraud prevention and security requirements;

  • chargebacks, disputes, warranties, returns, and potential legal claims; and

  • requirements imposed by payment processors or other service providers.

When personal information is no longer required, we will delete, anonymize, or otherwise dispose of it as appropriate, subject to applicable legal retention obligations.

12. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have rights regarding your personal information, including the right to:

  • request access to personal information we hold about you;

  • request correction of inaccurate or incomplete information;

  • request deletion of personal information;

  • request restriction of processing;

  • object to certain processing;

  • request portability of eligible personal information;

  • withdraw consent where processing is based on consent;

  • object to direct marketing;

  • opt out of certain targeted advertising, sale, or sharing of personal information where applicable; and

  • lodge a complaint with a competent data protection authority.

These rights are not absolute and may be subject to exceptions provided by applicable law.

We may need to verify your identity before completing certain requests.

For residents of the EEA and UK, we will respond to valid requests within the time required by applicable law. This will generally be within one month, subject to legally permitted extensions in appropriate circumstances.

To exercise your privacy rights, contact:

sovysleep@outlook.com

We will not unlawfully discriminate against you for exercising applicable privacy rights.

13. Automated Processing and Fraud Screening

We and our service providers may use automated tools to identify fraud, security risks, suspicious transactions, or other potentially harmful activity.

Where applicable law provides special rights regarding a decision based solely on automated processing that produces legal or similarly significant effects, those rights will be respected.

Where required, additional information about the relevant processing, logic, significance, and available safeguards will be provided.

14. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no system for transmitting or storing information can be guaranteed to be completely secure.

If a personal data breach occurs, we will investigate and take appropriate measures and, where legally required, notify the competent supervisory authority and/or affected individuals.

15. Third-Party Websites and Services

Our Services may contain links or integrations operated by third parties.

We are not responsible for the privacy, security, accuracy, or practices of third-party websites or services that are not controlled by us.

We encourage you to review the privacy notices and terms of those third parties before providing personal information.

16. Children's Privacy

Our Services are intended for adults and are not directed at children.

We do not knowingly collect personal information from children in circumstances prohibited by applicable law.

If you are a parent or legal guardian and believe that a child has provided personal information to us unlawfully, please contact us at sovysleep@outlook.com so that we can investigate and, where appropriate, delete the information.

17. Complaints

If you have a concern about how we process your personal information, please contact us first at:

sovysleep@outlook.com

If you are located in the EEA, you also have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or place of the alleged infringement.

Because our business is established in Spain, the relevant Spanish supervisory authority is the Agencia Española de Protección de Datos (AEPD).

You are not required to waive any right to contact a competent supervisory authority.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, Services, technologies, suppliers, legal obligations, or other operational requirements.

When we make changes, we will publish the updated Privacy Policy on this website and update the "Last updated" date.

Where applicable law requires additional notice or consent for a material change, we will provide such notice or obtain such consent.

19. Contact Us

For questions about this Privacy Policy, our privacy practices, or requests relating to your personal information, contact:

SOVY
Calle Esteban de Ágreda
26007 Logroño, La Rioja
Spain

Email: sovysleep@outlook.com