Draft privacy notice. This preview does not operate a live retail business. Business identity, jurisdiction, processors and retention schedules must be reviewed before launch.
Information we collect
When enabled, account services collect your email, display name and authentication identifiers. Ordering adds delivery details, item selections and payment references. Stripe handles card details directly; Soveresque does not collect full card numbers or CVCs. Contact forms collect your name, email and message. Your bag and wishlist are stored in your browser when browsing anonymously.
How information is used
We use account information to authenticate you, maintain your selection and respond to support requests. Order information supports payment reconciliation, fulfillment, fraud prevention and returns. Marketing messages require separate opt-in consent. The intended legal bases are contract performance, consent, applicable legal obligations and proportionate legitimate interests; the final basis must be confirmed for each processing activity in the launch jurisdiction.
Your choices and rights
Subject to applicable law, you may request access, correction, a portable copy, deletion, restriction or objection to processing. Account settings provide an authenticated export. Contact support for requests not yet supported by self-service tools. Account deletion must not erase records that a legal obligation requires us to retain. Removing a Soveresque profile does not delete your Google account. The relevant regulator and privacy contact must be confirmed before launch.
Retention and deletion
Proposed schedule for legal review: contact requests for 12 months after resolution; security and audit logs for at least 90 days; abandoned checkout records for 30 days after reconciliation. Order and tax records may need to be retained for several years under local law. No final financial retention duration has been adopted. A tested deletion and retention job is a launch requirement, not an implied capability of this preview.
Protecting your information
We separate payment processing from our application and restrict authenticated resources to their owners. Managed authentication handles password storage. No system can promise absolute security. If an incident affects personal information, we will assess notification obligations in the relevant jurisdictions and obtain professional advice.
Age restrictions
Soveresque is intended for adults able to enter a purchase agreement and is not directed at children. We do not knowingly request personal data from children. If you believe a child has supplied data, use the contact page to request a review.
Questions and updates
Use the Contact page for privacy requests when support is configured. A monitored privacy email and legal business identity must be added before launch. Material changes will be reflected in the date above and communicated where required.