Privacy policy

Who is responsible

The data controller is SOHAN LLC,

What we collect and why

Order information — name, delivery address, email, phone and payment confirmation. We need this to fulfil the contract and to comply with tax and accounting law.
Email address, if you sign up to our list. We rely on your consent and you can withdraw it at any time using the unsubscribe link.
Site usage data via cookies, to keep your basket working and to understand which pages are useful.

We do not collect special-category data, and we do not ask you about your health.

Who processes it

Our store runs on Shopify, which processes order and browsing data on our behalf. Payment providers handle card details directly, we never see or store your full card number. Carriers receive the delivery details they need to deliver.

How long we keep it

Order records for as long as tax and accounting law requires. Marketing consent until you withdraw it.

Your rights

Under the GDPR you can ask for a copy of your data, ask us to correct or delete it, object to processing, or ask us to restrict it. Email policy@sohanscents.com and we will respond within one month. You may also complain to your national supervisory authority in Poland, the President of the Personal Data Protection Office (UODO).

International transfers

Some of our processors operate outside the EEA. Where that happens, transfers are covered by the safeguards those providers put in place, such as standard contractual clauses.