Privacy policy

2. Privacy policy

Privacy Policy

Last updated: 23 September 2026

1. Who we are

This Privacy Policy explains how personal data is processed when you visit or buy from covenne.store under the Covenne brand. The data controller is:

AWA GLOBAL ECOM LTD
Private limited company registered in England and Wales, company number 17183374
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
Email: support@covenne.store
Telephone: +44 7537 133667

2. Scope

This Policy applies to customers and visitors in the United Kingdom, the European Union and the European Economic Area, other European countries, the United States, Canada and Mexico. Sections 11 to 14 set out additional information for specific jurisdictions.

3. Personal data we collect

  • Identity and contact data: name, email address, telephone number, billing address and delivery address.
  • Order data: products purchased, order value, order number, delivery details and communications about your order.
  • Payment data: payment method and transaction confirmation. Card details are processed directly by our payment providers. We do not store full card numbers.
  • Technical data: IP address, browser type, device information, operating system, pages viewed, referring website and approximate location derived from your IP address.
  • Marketing data: your marketing preferences and your interactions with our emails.
  • Support data: the content of your messages to us, including any photographs you send with a refund request.

We collect this data directly from you, automatically through cookies and similar technologies, and from our service providers, such as payment providers and carriers.

4. How we use personal data and legal bases

Where the UK GDPR or the EU General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:

  • To process and deliver orders, handle payments, send order and shipping updates, and deal with refund requests: performance of a contract (Article 6(1)(b)).
  • To comply with tax, accounting and other legal obligations: legal obligation (Article 6(1)(c)).
  • To prevent fraud, secure our website, keep records and establish or defend legal claims: legitimate interests (Article 6(1)(f)).
  • To answer your enquiries: performance of a contract or our legitimate interests (Article 6(1)(b) or (f)).
  • To use non-essential cookies, analytics and advertising pixels: consent (Article 6(1)(a)).
  • To send marketing emails: consent (Article 6(1)(a)). Where the law permits, we may instead rely on legitimate interests to send marketing about similar products to existing customers, and you can opt out at any time.

You must provide the data needed to fulfil your order. Without it, we cannot process your purchase.

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

5. Cookies and tracking technologies

Cookies are small text files stored on your device. We use the following categories.

Strictly necessary cookies (Shopify). These make the store work: shopping cart, checkout, security and remembering your cookie choices. They do not require consent and cannot be switched off through our cookie banner.

Analytics and advertising technologies. Where consent is required, we only activate these after you consent through our cookie banner:

  • Meta Pixel (Meta Platforms Ireland Limited / Meta Platforms, Inc.). Measures the effectiveness of our advertising on Facebook and Instagram, builds audiences for advertising and records actions such as page views, add-to-cart and purchases.
  • Google Analytics 4 (Google Ireland Limited / Google LLC). Analyses how visitors use our website, such as pages visited, session duration and traffic sources, so that we can improve the store.
  • TikTok Pixel (TikTok Technology Limited / TikTok Inc.). Measures the effectiveness of our advertising on TikTok, builds audiences for advertising and records actions on our website.
  • Klaviyo (Klaviyo, Inc.). Sends marketing emails and order-related emails, records sign-ups and email interactions such as opens and clicks, and tracks browsing activity on our website to personalise emails, such as reminders about products left in your cart.

How to refuse or withdraw consent

  • Cookie banner: when you first visit, you can accept or reject non-essential cookies. You can change your choice at any time using the cookie or privacy settings link in the footer of our website.
  • Browser settings: you can block or delete cookies in your browser. Blocking strictly necessary cookies may prevent checkout from working.
  • Google Analytics: you can install the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
  • Meta: you can manage ad preferences in your Facebook or Instagram account settings.
  • TikTok: you can manage ad personalisation in your TikTok account's privacy settings.
  • Klaviyo emails: click "unsubscribe" in any marketing email or write to support@covenne.store.
  • Global Privacy Control: where required by law, we treat a Global Privacy Control signal as a request to opt out of the sale or sharing of personal data.

6. Who we share personal data with

We share personal data only as needed for the purposes above, with:

  • Shopify: our e-commerce platform, which hosts the store and processes orders.
  • Payment providers: to process payments and prevent fraud.
  • Our third-party supplier and its logistics partners in China: to fulfil and dispatch your order. They receive your name, delivery address, telephone number and order contents.
  • Carriers and postal services: to deliver your order.
  • Meta, Google, TikTok and Klaviyo: as described in section 5.
  • Professional advisers: such as accountants and lawyers.
  • Public authorities: including customs and tax authorities, where the law requires it.

We do not sell personal data for money. Section 12 explains how "sale" and "sharing" are defined under California law.

7. International transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom and the European Economic Area, including the United States (Shopify, Meta, Google, TikTok, Klaviyo) and China (our supplier and its logistics partners, for order fulfilment).

Where the UK GDPR or GDPR applies, we transfer data on the basis of adequacy decisions where available, including the EU-US Data Privacy Framework and the UK Extension for certified recipients. Otherwise, we use the European Commission's Standard Contractual Clauses and, for UK data, the International Data Transfer Addendum or the International Data Transfer Agreement. Transfers to China for order fulfilment are necessary for the performance of your contract. You may request further information about these safeguards by writing to support@covenne.store.

8. Retention

  • Order and transaction records: kept for 6 years after the end of the financial year in which the order was placed, to meet tax and accounting obligations.
  • Support communications: kept for up to 3 years after the case is closed.
  • Marketing data: kept until you unsubscribe or withdraw consent, after which we keep only a suppression record to respect your choice.
  • Cookie data: kept for the periods stated in our cookie banner.

9. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and access controls. No method of transmission over the internet is completely secure.

10. Children

Our store is not directed at children under 16, and we do not knowingly collect personal data from them.

11. Your rights under the UK GDPR and the GDPR

If you are in the United Kingdom, the European Union or the European Economic Area, you have the right to:

  • access your personal data;
  • have inaccurate data rectified;
  • have your data erased;
  • restrict processing;
  • receive your data in a portable format;
  • object to processing based on legitimate interests, and to object at any time to direct marketing;
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, email support@covenne.store. We will respond within one month, which may be extended where the law allows.

You also have the right to lodge a complaint with a supervisory authority. In the United Kingdom, this is the Information Commissioner's Office (ico.org.uk). In the European Union and the European Economic Area, it is the data protection authority of your country of residence, place of work or place of the alleged infringement.

12. California residents (CCPA as amended by the CPRA)

Categories of personal information collected in the last 12 months:

  • identifiers, such as name, email address, postal address and IP address;
  • customer records, such as telephone number and payment information;
  • commercial information, such as purchase history;
  • internet or other electronic network activity, such as browsing and interaction data;
  • approximate geolocation data;
  • inferences used for marketing.

The sources, purposes and recipients are described in sections 3 to 6. We do not collect sensitive personal information for the purpose of inferring characteristics about you.

Sale and sharing: we do not sell personal information for money. Our use of the Meta Pixel, TikTok Pixel and Google Analytics may be considered a "sale" or "sharing" of personal information for cross-context behavioural advertising under California law. We do not knowingly sell or share the personal information of consumers under 16.

Your rights:

  • to know what personal information we collect, use, disclose, sell and share;
  • to access that information;
  • to delete it;
  • to correct it;
  • to opt out of the sale or sharing of personal information;
  • to limit the use of sensitive personal information;
  • not to be discriminated against for exercising your rights.

To exercise these rights, email support@covenne.store or use the privacy choices link in the footer of our website. We honour Global Privacy Control signals as a valid opt-out request.

We will verify your request by matching the information you provide with our records. An authorised agent may submit a request on your behalf with your written permission. We respond within 45 days, which may be extended by a further 45 days where necessary, with notice to you.

We keep personal information for the periods stated in section 8.

13. Canadian residents

We process personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws. You may request access to and correction of your personal information, and you may withdraw consent to processing, subject to legal and contractual restrictions.

We send commercial electronic messages only with your consent, in accordance with Canada's Anti-Spam Legislation. Each message includes an unsubscribe mechanism.

You may contact us at support@covenne.store. You may also file a complaint with the Office of the Privacy Commissioner of Canada.

14. Mexican residents

We process personal data in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares).

You have the rights of Access, Rectification, Cancellation and Opposition (ARCO rights), and you may withdraw your consent or limit the use or disclosure of your data. To exercise them, email support@covenne.store with:

  • your name;
  • a copy of an identification document;
  • a clear description of the data and the right you wish to exercise;
  • any document that helps locate the data.

We will respond within the periods set by law. You may file a complaint with the competent Mexican data protection authority.

15. Changes to this Policy

We may update this Policy. The date at the top shows when it was last revised. We will notify you of material changes by email or by a notice on our website.

16. Contact

Covenne, operated by AWA GLOBAL ECOM LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Email: support@covenne.store. Telephone: +44 7537 133667.