Privacy Policy

Last Updated: June 20, 2026

Sorenza Fashion (operated by FF COMMERCE LTD, "we," "our," or "us") operates this store and website to provide you with a curated shopping experience (the "Services"). Our storefront is powered by Shopify, which enables us to provide secure e-commerce capabilities to you.

This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit, use, or make a purchase from our website or otherwise communicate with us. We process all personal data in full compliance with the UK General Data Protection Regulation (UK GDPR), the UK Data Protection Act 2018, and applicable European data protection legislation.

1. Personal Information We Collect or Process

Depending on how you interact with our storefront, we collect and process the following categories of personal information:

2. Sources & How We Use Your Information

We collect data directly from you, automatically through cookies and device tracking, and from trusted service providers (e.g., Shopify, payment gateways, postal logistics). We process your data for the following purposes:

• Providing & Fulfilling Services: To fulfill contracts, process payments, ship purchases, facilitate returns/exchanges, manage accounts, and deliver customer support.
• Marketing & Advertising: To send promotional communications (where permitted or consented to) and present tailored online advertisements based on your preferences.
• Security & Fraud Prevention: To authenticate accounts, secure checkout, detect unauthorized activities, and prevent fraudulent transactions.
• Legal Compliance: To comply with statutory obligations, tax regulations, and valid requests from law enforcement or judicial bodies.

3. Disclosure & Relationship with Shopify

We disclose personal information to trusted third parties necessary to operate our business, including Shopify (our platform host), payment processors, cloud hosting services, marketing partners, and logistics fulfillment providers.

Shopify Features: Our store is hosted on Shopify Inc. Shopify collects and processes personal information to support our storefront and provide enhanced features (such as personalized commerce recommendations across Shopify merchants). To learn more about Shopify’s independent processing practices or exercise privacy rights, please review the Shopify Consumer Privacy Policy.

4. Your UK & EEA Privacy Rights

Under the UK GDPR, Data Protection Act 2018, and EU GDPR, residents in the UK and European Economic Area possess the following statutory rights regarding their personal data:

• Right to Access / Know: Request confirmation and a copy of the personal data we hold about you.
• Right to Erasure (Deletion): Request deletion of your personal information subject to legal retention exceptions.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format or request its transfer to a third party.
• Right to Object & Restrict Processing: Request that we limit or stop processing your data for specific operational or direct marketing purposes.
• Withdrawal of Consent: Revoke consent for data processing at any time without affecting prior lawful processing.

To exercise any of these rights, contact our Data Controller at info@sorenzafashion.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local EEA supervisory authority.

5. Security, Retention & International Transfers

International Data Transfers: When transferring personal data outside the UK or European Economic Area, we rely on recognized legal transfer mechanisms, such as the UK International Data Transfer Agreement (IDTA) or European Commission Standard Contractual Clauses (SCCs).

Retention & Children: Personal data is retained only as long as necessary to maintain accounts, satisfy contractual obligations, enforce policies, or comply with statutory tax and accounting rules. Our storefront is not directed toward children under the age of majority, and we do not knowingly collect children's data.

Data Controller Profile & Contacts