Privacy policy
Privacy Policy
Last updated: 5 January 2026
Só Soy operates this website and store, including all related information, content, features, tools, products, and services, to provide you with a curated shopping experience (the Services). Só Soy uses Shopify to power its online store and related services.
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, make a purchase, interact with us, or otherwise use the Services. Where there is a conflict between this Privacy Policy and our Terms of Service, this Privacy Policy will apply in relation to personal information.
By accessing or using any part of the Services, you confirm that you have read and understood this Privacy Policy.
Personal Information We Collect
When we refer to personal information, we mean information that identifies you, relates to you, or can reasonably be linked to you. This does not include anonymised or aggregated data.
Depending on how you interact with Só Soy, we may collect the following categories of personal information:
• Contact information such as your name, billing address, shipping address, email address, and phone number. • Payment and transaction information such as payment method, transaction amounts, order history, refunds, and confirmations. Payment card details are processed securely by our payment providers and are not stored directly by us. • Account information including login details, preferences, saved addresses, and wishlists. • Purchase and usage information including products viewed, added to basket, purchased, returned, or exchanged. • Communications including emails, messages, reviews, workshop enquiries, and customer support interactions. • Device and technical information including IP address, browser type, device identifiers, and cookie data. • Website usage information such as pages visited, interactions, and browsing behaviour.
Sources of Personal Information
We collect personal information from the following sources:
• Directly from you when you place an order, create an account, sign up to emails, attend a workshop, or contact us. • Automatically through your use of the website via cookies and similar technologies. • From Shopify and service providers who help us operate the Services. • From third parties such as payment providers, delivery partners, and marketing platforms, where permitted by law.
How We Use Your Personal Information
We use your personal information for the following purposes:
Providing and Improving the Services To process orders, take payments, arrange delivery, manage returns, run workshops, administer loyalty points or subscriptions, maintain your account, and improve the functionality and experience of our website.
Personalisation To remember your preferences, suggest relevant products, and tailor your experience with Só Soy.
Marketing and Communications To send you marketing emails, updates, offers, and information about products or events where you have opted in, and to show relevant advertising on our website or third party platforms.
Customer Support To respond to enquiries, manage complaints, and provide customer care.
Security and Fraud Prevention To protect our website, customers, and business against fraud, misuse, or unauthorised access.
Legal and Regulatory Obligations To comply with applicable laws, accounting requirements, tax rules, and regulatory obligations, and to enforce our terms and policies.
Legal Bases for Processing
Where required under UK GDPR and EU GDPR, we rely on the following lawful bases to process personal information:
• Performance of a contract, such as fulfilling your order. • Legal obligation, such as record keeping and tax compliance. • Legitimate interests, such as improving our services and preventing fraud. • Consent, such as for marketing communications, which you can withdraw at any time.
Sharing Your Personal Information
We may share your personal information in the following circumstances:
• With Shopify, payment processors, delivery couriers, email providers, analytics providers, and IT service providers who help us operate the Services. • With marketing and advertising partners where you have consented or where permitted by law. • When you request or consent to sharing, such as social media integrations or delivery instructions. • With professional advisers, regulators, or authorities where required by law. • In connection with a business transfer, restructuring, or sale.
All third parties are required to handle your personal information securely and in accordance with applicable data protection laws.
Shopify and Platform Data
Our online store is hosted by Shopify. Shopify processes personal information on our behalf to provide and improve the Services and may process data outside the UK or EEA. Shopify acts as a data processor in most cases and as a data controller for certain platform level features.
You can learn more about Shopify’s data practices by visiting their Consumer Privacy Policy.
Cookies and Tracking Technologies
We use cookies and similar technologies to operate the website, analyse traffic, remember preferences, and support marketing activities. You can manage your cookie preferences through your browser settings and, where available, our cookie banner.
Children’s Privacy
Our Services are not intended for children, and we do not knowingly collect personal information from individuals under the age of 16. If you believe a child has provided us with personal information, please contact us so we can remove it.
Data Security and Retention
We take reasonable technical and organisational measures to protect your personal information. However, no system is completely secure, and we cannot guarantee absolute security.
We retain personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including legal, accounting, and reporting requirements.
Your Rights
Depending on your location, you may have the following rights regarding your personal information:
• The right to access your personal information. • The right to correct inaccurate information. • The right to request deletion of your information. • The right to restrict or object to processing. • The right to data portability. • The right to withdraw consent at any time. • The right to opt out of marketing communications.
You can exercise these rights by contacting us using the details below. We may need to verify your identity before processing your request.
If you are located in the UK or EEA, you also have the right to lodge a complaint with the Information Commissioner’s Office or your local data protection authority.
International Transfers
Your personal information may be transferred outside the UK or EEA. Where this occurs, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page and the date updated accordingly.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: hello@sosoy.co.uk
Address: Só Soy, 18 Meeting House Street, Unit 6 Taggarts Yard, Ballymoney, Northern Ireland, BT53 6JN, United Kingdom
For data protection purposes, Só Soy is the data controller of your personal information.