Privacy policy

Last updated 24 September 2026

What we collect, why we collect it, and how to make us stop. In plain words, with the legal detail underneath.

Who is responsible for your data

Sovelle London is the data controller for the personal data described here. Our address is Sovelle London, 2B Spectrum House, Hornchurch, RM12 6RJ, United Kingdom and our email is hello@sovellelondon.com. We are registered with the Information Commissioner’s Office.

What we collect

When you order

• Your name, email address, delivery address, billing address and phone number.
• What you bought, what you paid and when.
• A payment confirmation from our payment provider. We never see or store your full card number; Shopify Payments, PayPal and Klarna handle that.

When you email us or use the contact form

• Your name, your email address and whatever you choose to write to us.
• Your order number, if you give one.

When you sign up to hear from us

• Your email address, and the date you gave it to us.

When you simply browse

• Your IP address, roughly where in the world you are, the device and browser you are using, and the pages you looked at.
• We use your approximate country to show you the right delivery price. That is worked out from your IP address as the page loads and is not stored against you.

Why we are allowed to use it

• To perform a contract — taking your order, charging you, shipping it, handling returns and running the buy-back guarantee.
• Legitimate interests — keeping the site working and secure, preventing fraud, answering your messages and understanding which pages people find useful. We have weighed these against your privacy and kept the data to what the job needs.
• Consent — marketing email and any non-essential cookies. You gave it deliberately and you can take it back at any time.
• Legal obligation — keeping sales and tax records for as long as HMRC requires.

Who else sees it

Only the companies that make the shop work, and only the part of it they need:

• Shopify — the platform this store runs on. It hosts the site, processes orders and stores customer records.
• Shopify Payments, PayPal and Klarna — payment processing and fraud checks.
• Our carriers — your name, address and phone number, so the parcel arrives.
• Our email provider — order confirmations and, if you asked for it, marketing.
• Professional advisers and HMRC — where the law requires it.

We do not sell your data, rent it, or hand it to advertisers.

Leaving the UK

Some of those providers store data outside the United Kingdom, usually in the European Union or the United States. Where that happens the transfer is covered by an adequacy decision or by the International Data Transfer Agreement, which obliges them to protect your data to a UK standard.

How long we keep it

• Order and tax records: seven years, because HMRC requires it.
• Customer account details: for as long as the account exists, and two years after the last order if it is a guest checkout.
• Emails and contact form messages: two years.
• Marketing consent: until you withdraw it, and a suppression record afterwards so we do not email you again by mistake.
• Analytics: 14 months.

Your rights

Under the UK GDPR you can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong;
• delete it, where we do not need it for a legal reason;
• stop or restrict what we are doing with it;
• send it to you, or to someone else, in a portable format;
• stop using it for direct marketing — this one is absolute and takes effect immediately.

Email hello@sovellelondon.com and we will deal with it within one month. There is no charge. If you are not happy with how we have handled it you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113, though we would rather you gave us the chance to fix it first.

Marketing

We only email you about new pieces if you asked us to. Every email has an unsubscribe link in it and it works immediately. Order confirmations, despatch notices and replies to your own messages are not marketing and you cannot unsubscribe from those while an order is live.

Children

This shop is not aimed at children and we do not knowingly collect data from anyone under 16. If you think a child has given us their details, tell us and we will delete them.

Security

The site runs over HTTPS throughout. Payment data is handled by PCI-compliant providers and never reaches our systems. Access to customer records is limited to the people who need it to fulfil orders.

Changes

If we change this policy we will change the date at the top. If the change is significant, we will say so on the site.