Last updated: 11 November 2026
SEVALIN ([COMPANY NAME], “we”, “us”, “our”) operates https://sevalin.shop. This policy explains what personal information we collect when you visit or buy from our store, why we collect it, and what you can ask us to do with it.
Who we are
The data controller for this store is [COMPANY NAME], registered at [REGISTERED ADDRESS]. For any question about this policy or your information, write to [SUPPORT EMAIL].
What we collect
Information you give us
- Order details — name, billing and shipping address, email address, phone number, and the items you ordered.
- Account details — if you create an account, your username, email address and order history. Passwords are stored as one-way hashes; we never see them.
- Messages — anything you send through the contact form or by email.
- Reviews — the name and content you choose to publish on a product.
Information collected automatically
- Device and browser data — IP address, browser type, screen size, and the pages you viewed.
- Cart and session data — what is in your cart, stored in a cookie so the cart survives a page refresh.
- Fraud signals — our payment provider returns risk indicators with each transaction. We do not receive or store your full card number.
Why we use it, and on what legal basis
- To fulfil your order — taking payment, packing, shipping, and handling returns. Legal basis: performance of a contract.
- To answer you — replying to enquiries and supporting you after a purchase. Legal basis: our legitimate interest in serving customers.
- To keep records — invoices, tax records and accounting. Legal basis: legal obligation.
- To improve the store — understanding which pages are used, in aggregate. Legal basis: our legitimate interest in running a working shop.
- To contact you about new pieces — only if you asked for it, and only until you unsubscribe. Legal basis: consent.
Payments
Card payments are processed by our payment provider. Your card number is entered on their secured checkout and is never transmitted to or stored on our servers. We receive only a transaction reference, the amount, and a pass or fail result — plus the billing details you enter, which we use to match the payment to the order.
Shipping
We pass your name, delivery address and phone number to the carrier that delivers your parcel. Carriers receive only what is needed to complete the delivery.
Who we share data with
We share personal information only with the service providers needed to run the store — payment processing, shipping, email delivery, hosting, and accounting. Each is bound to use it only for the service they provide.
We do not sell your personal information, and we do not share it with advertising networks.
International transfers
Our store and some of our service providers may process data outside the country you live in, including in the United States. Where data leaves the UK or the EEA, we rely on standard contractual clauses or an equivalent approved mechanism.
How long we keep it
- Order and invoice records — kept for as long as tax and accounting law requires.
- Account details — until you ask us to close the account.
- Contact messages — up to 24 months after the conversation ends.
- Cart and session cookies — expire automatically; see our Cookie Policy.
Your rights
Depending on where you live, you may have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct information that is wrong;
- ask us to delete information we no longer need;
- ask us to restrict what we do with it, or object to a particular use;
- receive your data in a portable format;
- withdraw consent at any time, where we relied on consent.
Write to [SUPPORT EMAIL] and we will respond within 30 days. We may ask you to verify your identity first. You also have the right to complain to your local data protection authority.
California residents
If you live in California, you may ask us to disclose the categories and specific pieces of personal information we have collected about you, the sources, and the business purpose; to delete it; and to correct it. We will not discriminate against you for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising as those terms are defined by the CCPA.
Security
The store runs over HTTPS and access to customer data is limited to the people who need it to fulfil orders. No system is perfectly secure; if a breach affects your rights, we will notify you and the relevant authority as required by law.
Children
This store is not intended for children under 16 and we do not knowingly collect their personal information. If you believe a child has provided us with data, write to us and we will delete it.
Changes to this policy
If we change how we handle personal information, we will update this page and move the “last updated” date. Material changes will be announced on the store.
Contact
Privacy questions: [PRIVACY EMAIL]. General support: [SUPPORT EMAIL].