Privacy Policy

At Sofenne, we value your privacy and are committed to handling your personal information with care, transparency, and respect.

This Privacy Policy explains how Verax Commerce LLC (trading as Sofenne) (“we”, “us”, or “our”) collects, uses, and shares your information when you visit or make a purchase from https://www.sofenne.com/ (the “Site”).

We handle personal information in accordance with applicable United Kingdom data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Marketing communications and certain cookies or similar technologies are also subject to the Privacy and Electronic Communications Regulations (PECR).

Section 1 – Your Information and Our Store

When you place an order, we collect the information you provide to us, such as your name, email address, billing details, and shipping information. This allows us to process and deliver your order and provide customer support where needed.

When you browse our website, certain technical information may also be collected automatically. This may include your IP address, browser type, device information, operating system, and how you interact with the website. This helps us operate, secure, and improve our services and website experience.

If you choose to subscribe to our updates or provide consent, we may use your email address to send occasional news, product updates, or promotional communications in accordance with UK GDPR and PECR requirements.

Section 2 – Legal Basis and Your Rights

Where applicable, we process personal data on the following legal bases:

Performance of a contract (such as processing and delivering orders)
Legal obligations (such as accounting and tax requirements)
Legitimate interests (such as improving our services and preventing fraud)
Consent (such as marketing communications and certain cookies)

Providing consent: When you provide personal information to place an order, verify payment, arrange delivery, or complete a transaction, you consent to the collection and use of that information for those specific purposes.

Where additional consent is required, such as for marketing communications, we will ask for your permission clearly and separately.

Revoking consent: You may withdraw your consent at any time, where applicable under data protection laws, by contacting us at support@sofenne.com.

Under UK GDPR, your rights may include:

The right to access your personal data
The right to correct inaccurate data
The right to request deletion of your data
The right to restrict or object to processing
The right to data portability
The right to withdraw consent at any time
The right to lodge a complaint with the Information Commissioner’s Office (ICO)

Section 3 – Sharing Your Information

We may disclose personal information where required by law or if our Terms of Service are violated.

We may also share information with trusted third-party providers that help us operate our business and services, including:

Payment providers
Delivery and fulfilment partners
Website and hosting providers
Analytics services
Fraud prevention and security providers

These partners only receive the information necessary to carry out their services securely and responsibly.

Section 4 – Shopify Platform

Our store is hosted by Shopify Inc., which provides the e-commerce platform that allows us to sell our products and services online.

Your information is stored through Shopify’s secure systems and protected using safeguards such as encryption and firewalls.

Payment information is processed in accordance with PCI DSS security standards and retained only as long as necessary to complete transactions and comply with legal obligations.

Further information is available in Shopify’s Privacy Policy and Terms of Service.

Section 5 – Third-Party Providers

Certain third-party providers may process information on our behalf where necessary to provide their services.

These providers maintain their own privacy and security practices, and we encourage you to review their policies where relevant.

Some providers may process information outside the United Kingdom. Where this applies, appropriate safeguards are implemented to help protect your information in accordance with applicable data protection laws.

This Privacy Policy does not apply to third-party websites, services, or external applications linked from our website.

We may also use analytics tools, such as Google Analytics, to better understand website usage and improve performance.

Section 6 – Data Protection

We take reasonable technical and organisational measures to help protect your information and keep it secure.

Payment information is protected using encryption and secure transmission technologies.

While no method of transmission or storage can be guaranteed to be completely secure, we apply appropriate safeguards in line with applicable data protection laws.

If a data breach occurs that is likely to pose a risk to individuals’ rights and freedoms, we will follow the notification procedures required under applicable law.

Section 7 – Cookies

We use cookies and similar technologies to help operate our website, remember preferences, analyse website traffic, and improve the overall shopping experience.

Some cookies may also be placed by trusted third parties, including analytics and advertising partners such as Google and Meta.

For more information about the cookies we use and how you can manage them, please refer to our Cookie Policy.

Additional Shopify-related cookie information is available through Shopify Cookie Policy.

Section 8 – Updates to This Policy

We retain personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes.

Any important updates will be posted on this page.

If our business is involved in a merger, acquisition, or sale of assets, personal information may be transferred in accordance with applicable data protection laws.