Privacy Policy

Who is responsible for your information

Sofuto Solutions LLP, doing business as Alova, is responsible for the personal information covered by this policy. Payment information entered at checkout is processed directly by Whop and its payment partners. Alova does not receive or store your complete payment-card number.

Information we collect

Information you provide

• Contact details, such as your name, email address, telephone number, billing address, and shipping address.
• Order details, including the product selected, amount paid, order status, and fulfillment information.
• Messages and other information you provide when you contact customer support or exercise a privacy right.

Information collected automatically

• Device and browser information, IP address, approximate location derived from IP, referring page, and website activity.
• Cookie and advertising identifiers, including Meta identifiers such as _fbp and _fbc when available.
• Technical records used to secure the website, prevent fraud, and diagnose errors.

How we use information

• Process checkout, confirm payment, fulfill orders, provide delivery updates, and handle returns or refunds.
• Provide customer support and respond to requests.
• Protect the store, customers, and payment process from fraud, abuse, and security threats.
• Measure website and advertising performance, including through the Meta Pixel and Meta Conversions API.
• Comply with legal, tax, accounting, and regulatory obligations.
• Improve the website, product presentation, and customer experience.

Lawful bases

Where UK data-protection law applies, we process personal information as needed to perform a contract with you, comply with legal obligations, pursue legitimate interests such as operating and securing the store, and, where required, based on your consent. The lawful basis depends on the purpose and type of information involved.

How we share information

We share personal information only as needed for the purposes described in this policy. Recipients may include:

• Whop and its payment partners for checkout, payment processing, fraud prevention, and payment confirmation.
• Vercel for website hosting, network delivery, security, and technical operation.
• Meta Platforms for advertising measurement and attribution through browser and server events.
• Shipping, fulfillment, customer-support, accounting, legal, and other operational providers.
• Government authorities or other parties when disclosure is required by law or needed to protect legal rights.

We do not provide complete payment-card numbers to advertising providers.

Cookies and advertising measurement

The website uses browser storage, cookies, and similar technologies for essential operation, fraud prevention, checkout continuity, and advertising measurement. Meta may use event information to measure ads and build audiences according to its own privacy terms.

You can limit cookies through your browser settings. Blocking some technologies may reduce attribution accuracy or affect parts of the checkout experience. To request an opt-out from targeted advertising associated with information we control, email us using the address below.

Retention and security

We retain personal information only for as long as reasonably needed to complete transactions, support customers, meet legal and accounting obligations, resolve disputes, and protect against fraud. Retention periods vary by record type and applicable law.

We use reasonable administrative, technical, and organizational safeguards. No online service can guarantee absolute security. Please do not send full payment-card details by email.

Your privacy rights

Depending on where you live, you may have the right to request access, correction, deletion, restriction, portability, or a copy of personal information. You may also have the right to object to certain processing, withdraw consent where processing relies on consent, opt out of certain advertising uses, or appeal a decision on a privacy request.

We may need to verify your identity before completing a request. Authorized agents may submit a request where permitted by law. You will not be discriminated against for exercising a privacy right.

If UK data-protection law applies, you may also complain to the UK Information Commissioner's Office.

International transfers

Our business is based in the United Kingdom. Service providers may process information in the United States and other countries. Where required, international transfers are supported by adequacy regulations, approved contractual safeguards, or another lawful transfer mechanism.

Children

This store is intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact us so we can review and delete it where appropriate.

Changes to this policy

We may update this policy to reflect changes in law, our services, or our providers. The date at the top shows when it was last revised.