Privacy Policy

Last updated: September 1, 2026

This Privacy Policy describes how OAK E-Commerce LLC, doing business as Sovaya (“Sovaya,” the “Site,” “we,” “us,” or “our”) collects, uses, stores, and discloses your personal information when you visit our website, use our services, make a purchase, or otherwise communicate with us regarding the Site (collectively, the “Services”).

For purposes of this Privacy Policy, “you” and “your” mean you as a user of the Services, whether you are a customer, website visitor, subscriber, or another individual whose personal information we collect.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices, Services, technology, or for operational, legal, or regulatory reasons.

When we make changes, we may post the revised Privacy Policy on the Site, update the “Last updated” date, and take any additional steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information from a variety of sources.

The information we collect and how we use it depends on how you interact with Sovaya and our Services.

In addition to the specific uses described below, we may use information collected about you to:

• Provide and fulfill the Services;

• Process and deliver orders;

• Manage subscriptions;

• Process payments;

• Communicate with you;

• Provide customer support;

• Improve our products and Services;

• Personalize your experience;

• Conduct analytics;

• Provide advertising and marketing;

• Prevent fraud and abuse;

• Protect our business and customers;

• Comply with applicable legal obligations;

• Enforce our Terms of Service; and

• Protect or defend our rights and the rights of our users and others.

If you have questions about this Privacy Policy or how Sovaya handles your personal information, you may contact us at:

Sovaya / OAK E-Commerce LLC
30 N Gould St, Ste N
Sheridan, WY 82801
United States
Email: info@sovaya.com

What Personal Information We Collect

The personal information we obtain depends on how you interact with our Site and Services.

When we use the term “personal information,” we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with you.

Information We Collect Directly From You

Information you provide directly through our Services may include:

• Contact information, including your name, mailing address, shipping address, telephone number, and email address.

• Order information, including your name, billing address, shipping address, payment confirmation, email address, telephone number, products purchased, and order history.

• Account information, including your username, password, account preferences, and information used for account security.

• Shopping information, including products you view, add to your cart, purchase, save, review, or otherwise interact with.

• Subscription information, including your selected products, subscription frequency, subscription status, and related account preferences.

• Reviews, referrals, promotions, loyalty information, and gift-card information, where applicable.

• Customer-support information, including information you provide when contacting us about an order, product, refund, return, subscription, or other matter.

• Marketing preferences, including your email and SMS subscription preferences.

Certain features of our Services may require you to provide specific information.

You may choose not to provide this information, but doing so may prevent you from accessing or using certain features.

Information We Collect About Your Usage

We may automatically collect certain information about your interaction with our Services (“Usage Data”).

We may use cookies, pixels, web beacons, software development kits, tags, and similar technologies (“Cookies”) for this purpose.

Usage Data may include:

• Device information;

• Browser type;

• Operating system;

• Network information;

• IP address;

• Approximate location derived from IP address;

• Pages visited;

• Products viewed;

• Links clicked;

• Cart activity;

• Referring websites;

• Advertising interactions;

• Date and time of visits; and

• Other information concerning your interaction with our Services.

Information We Obtain From Third Parties

We may receive personal information from third parties, including vendors and service providers that collect or process information on our behalf.

These may include:

• E-commerce and website providers such as Shopify;

• Payment processors;

• Shipping and fulfillment providers;

• Subscription-management providers;

• Customer-support providers;

• Analytics providers;

• Advertising and marketing platforms;

• Email and SMS providers;

• Fraud-prevention providers; and

• Other technology and business-service providers.

Our payment processors may collect payment information such as credit or debit card details, billing information, and payment confirmation information necessary to process transactions.

When you visit our Site, open or click emails we send, interact with our advertisements, or otherwise use our Services, we and third parties we work with may collect information using Cookies, pixels, web beacons, SDKs, APIs, and similar technologies.

Information obtained from third parties will be handled in accordance with this Privacy Policy and applicable law.

How We Use Your Personal Information

Providing Products and Services

We may use personal information to provide the Services and perform our contract with you.

This includes using information to:

• Process payments;

• Process and fulfill orders;

• Arrange shipping and delivery;

• Send order confirmations and transactional notifications;

• Manage purchases;

• Process returns, exchanges, and refunds;

• Create and maintain customer accounts;

• Manage subscriptions;

• Provide customer support; and

• Provide other functionality associated with your account or purchase.

Where applicable, Shopify may process information according to its own privacy policies when providing Shopify-related functionality.

Marketing and Advertising

We may use personal information for marketing, advertising, and promotional purposes.

This may include:

• Sending promotional emails;

• Sending SMS or text-message marketing where you have provided the required consent;

• Sending promotional communications;

• Personalizing offers;

• Measuring advertising performance;

• Building or using advertising audiences where permitted by law; and

• Displaying advertisements for Sovaya products on our Site or third-party websites, applications, and platforms.

Depending on your jurisdiction, these activities may be performed based on your consent, our legitimate interests, or another lawful basis.

Where applicable under European data-protection law, certain marketing and advertising processing may be based on our legitimate interests under Article 6(1)(f) GDPR, except where consent or another legal basis is required.

Security and Fraud Prevention

We may use personal information to detect, investigate, prevent, or respond to suspected fraudulent, illegal, abusive, or malicious activity.

If you create an account, you are responsible for maintaining the confidentiality and security of your account credentials.

Please contact us at info@sovaya.com if you believe your account or personal information has been compromised.

Where applicable, this processing may be based on our legitimate interest in protecting our customers, Site, and business.

Communicating With You and Improving Our Services

We may use personal information to:

• Respond to questions;

• Provide customer support;

• Resolve complaints;

• Communicate about orders and subscriptions;

• Improve our products;

• Improve our Site and Services;

• Understand how customers interact with our Services; and

• Maintain our business relationship with you.

Where applicable, these activities may be based on our legitimate interests in operating and improving our business and providing effective customer service.

Cookies

Like many online businesses, we use Cookies and similar technologies on our Site.

Cookies may be used to:

• Operate our Site;

• Remember your preferences;

• Maintain shopping-cart functionality;

• Keep you logged into your account;

• Analyze Site performance;

• Understand how visitors interact with our Services;

• Measure advertising performance;

• Prevent fraud;

• Personalize content; and

• Deliver or measure advertising.

We may permit third parties and service providers to place or use Cookies on our Site in connection with analytics, advertising, payments, website functionality, and other Services.

Most browsers automatically accept Cookies by default. You can generally configure your browser to remove, reject, or restrict Cookies.

Blocking Cookies may affect your experience and may prevent certain features of the Services from functioning correctly.

Where required by applicable law, we will obtain consent before using non-essential Cookies.

Global Privacy Control

Where required by applicable law, our website may recognize the Global Privacy Control (“GPC”) signal as a request to opt out of certain sharing, sales, or targeted advertising associated with the browser or device sending the signal.

Other “Do Not Track” signals may not be recognized unless required by applicable law.

How We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary to operate our business, fulfill our contractual obligations, provide the Services, conduct advertising and marketing, comply with applicable law, or otherwise for purposes described in this Privacy Policy.

Recipients may include:

• Vendors and service providers performing services on our behalf, such as IT management, payment processing, analytics, customer support, subscription management, cloud storage, fulfillment, and shipping;

• Advertising and marketing partners;

• E-commerce platforms;

• Payment processors;

• Logistics and fulfillment providers;

• Customer-support platforms;

• Analytics providers;

• Affiliates and companies within our corporate group;

• Professional advisers;

• Government authorities or other parties where disclosure is legally required; and

• Parties involved in a corporate transaction such as a merger, acquisition, financing, restructuring, sale of assets, or bankruptcy.

We may also disclose information when you direct us to do so, request a disclosure, or otherwise provide your consent.

Categories of Personal Information Disclosed

Depending on how you interact with our Services, we may disclose categories of information such as:

Identifiers
Examples include your name, email address, telephone number, IP address, and basic account information.

Recipients may include service providers, advertising and marketing partners, fulfillment providers, and affiliates.

Customer and Order Information
Examples include billing information, shipping information, purchases, order history, and customer-support interactions.

Recipients may include payment processors, fulfillment providers, shipping providers, service providers, and affiliates.

Commercial Information
Examples include products purchased, products viewed, cart activity, subscriptions, and purchase history.

Recipients may include service providers, advertising and marketing partners, and affiliates.

Internet or Electronic Network Activity
Examples include Usage Data, browser activity, interactions with our Site, and advertising interactions.

Recipients may include analytics providers, advertising partners, service providers, and affiliates.

Approximate Geolocation Information
Examples include location information inferred from your IP address.

Recipients may include service providers, analytics providers, advertising partners, and affiliates.

Sale, Sharing and Targeted Advertising

Certain U.S. privacy laws define terms such as “sale” and “sharing” broadly enough that some advertising and analytics activities may fall within those definitions even where no money is exchanged for personal information.

Depending on our practices and applicable law, Sovaya may “sell” or “share” the following categories of personal information for advertising, analytics, or marketing purposes:

• Identifiers such as email address and other contact information;

• Commercial information, such as products viewed or purchased; and

• Internet or Usage Data.

Recipients may include advertising, analytics, and marketing partners.

We do not knowingly sell or share personal information of individuals under 16 years of age.

Where applicable, you may have the right to opt out of the sale or sharing of personal information or the processing of personal information for targeted advertising.

Third-Party Websites and Links

Our Site may contain links to websites, applications, or online platforms operated by third parties.

If you follow a link to a website not controlled by Sovaya, you should review that third party’s privacy and security policies.

We are not responsible for the privacy, security, content, accuracy, or practices of third-party websites or platforms.

Information you voluntarily make available through public or semi-public platforms, including social-media platforms, may be visible to other users and may be used by those platforms or third parties.

Children's Data

Our Services are not directed toward children.

We do not knowingly collect personal information from children in violation of applicable law.

If you are a parent or legal guardian and believe a child has provided personal information to us, please contact info@sovaya.com so that we can review the request and take appropriate action.

We do not knowingly sell or share personal information belonging to individuals under 16 years of age.

Security and Retention of Your Information

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

However, no security system, storage system, or method of transmitting information over the internet is completely secure, and we cannot guarantee absolute security.

The length of time we retain personal information depends on factors such as:

• Whether you maintain an account;

• Whether the information is needed to provide the Services;

• Our contractual obligations;

• Tax and accounting requirements;

• Legal and regulatory requirements;

• Fraud-prevention needs;

• Dispute resolution; and

• Enforcement of our agreements and policies.

When personal information is no longer reasonably necessary, we may delete, anonymize, or otherwise dispose of it in accordance with applicable law.

Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have some or all of the following rights regarding your personal information:

• Right to Access / Know — request information about personal information we maintain about you.

• Right to Delete — request deletion of certain personal information.

• Right to Correct — request correction of inaccurate personal information.

• Right to Portability — request a copy of certain personal information in a portable format.

• Right to Opt Out of Sale or Sharing — opt out of certain disclosures defined as a “sale” or “sharing” under applicable privacy laws.

• Right to Opt Out of Targeted Advertising — opt out of certain processing for targeted advertising.

• Right to Restrict Processing — request restriction of certain processing where applicable.

• Right to Object — object to certain processing where applicable.

• Right to Withdraw Consent — withdraw consent where processing is based on your consent.

• Right to Appeal — appeal our decision regarding a privacy request where applicable.

• Right to Manage Communication Preferences — unsubscribe from promotional communications.

You may exercise applicable rights through mechanisms made available on our Site or by contacting:

info@sovaya.com

We will not unlawfully discriminate against you for exercising applicable privacy rights.

We may need to verify your identity before processing certain requests.

Where permitted by law, you may designate an authorized agent to submit a request on your behalf. We may require verification of the agent's authority and/or your identity.

We will respond within the period required by applicable law.

Email and SMS Communication Preferences

You may unsubscribe from promotional emails by using the unsubscribe mechanism contained in our marketing emails.

If you have consented to receive promotional SMS or text messages, you may opt out by replying STOP or by following another opt-out method described in the applicable message.

Opting out of promotional communications does not prevent us from sending transactional or service-related communications, such as order confirmations, shipping notifications, subscription notices, security communications, or responses to customer-support requests.

Complaints

If you have a complaint regarding our processing of personal information, please contact us at:

info@sovaya.com

Depending on your jurisdiction, you may also have the right to appeal a decision we make regarding your privacy request or lodge a complaint with an applicable privacy or data-protection authority.

International Users and Data Transfers

Sovaya operates an international e-commerce business, and personal information may be transferred, stored, or processed in countries other than the country in which you reside.

These countries may have data-protection laws that differ from those in your jurisdiction.

Where required by applicable law, we use recognized safeguards for international transfers of personal information.

For transfers of personal information from the European Economic Area, United Kingdom, or other applicable jurisdictions, these safeguards may include Standard Contractual Clauses or another legally recognized transfer mechanism unless the recipient country has been recognized as providing an adequate level of protection.

EEA AND UK USERS

If you are located in the European Economic Area or United Kingdom, applicable data-protection laws may provide you with rights regarding your personal information, including rights of access, rectification, erasure, portability, restriction, objection, and withdrawal of consent.

Depending on the processing activity, our legal basis for processing may include:

• Performance of a contract with you;

• Compliance with a legal obligation;

• Your consent; and

• Our legitimate interests, where those interests are not overridden by your rights and interests.

Where processing is based on consent, you may withdraw that consent at any time, without affecting the lawfulness of processing performed before withdrawal.

You may also have the right to lodge a complaint with the data-protection authority responsible for your jurisdiction.

CALIFORNIA AND OTHER U.S. STATE PRIVACY RIGHTS

Residents of California and certain other U.S. states may have additional privacy rights under applicable state privacy laws.

Depending on the applicable law, these rights may include:

• The right to know what categories of personal information we collect;

• The right to know the sources and purposes for which information is collected;

• The right to know categories of third parties to whom information is disclosed;

• The right to access specific pieces of personal information;

• The right to correct inaccurate information;

• The right to request deletion;

• The right to obtain a portable copy of information;

• The right to opt out of certain sales or sharing;

• The right to opt out of targeted advertising;

• The right to limit certain uses of sensitive personal information where applicable; and

• The right not to receive discriminatory treatment for exercising privacy rights.

You may submit applicable requests by contacting info@sovaya.com or through privacy controls made available on our Site.

Contact

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise a privacy right, please contact:

OAK E-Commerce LLC / Sovaya
30 N Gould St, Ste N
Sheridan, WY 82801
United States

Email: info@sovaya.com

For purposes of applicable data-protection laws, unless otherwise stated, OAK E-Commerce LLC is the data controller responsible for personal information processed in connection with Sovaya.

---

† FDA Disclaimer: Statements regarding dietary supplements have not been evaluated by the U.S. Food and Drug Administration. Sovaya products are not intended to diagnose, treat, cure, or prevent any disease.

* Individual Results: Individual results may vary. Testimonials, reviews, and other customer experiences reflect individual experiences and do not represent guaranteed outcomes.

‡ Supplement Use: Consult an appropriate healthcare professional before beginning any supplement regimen, particularly if you are pregnant, nursing, taking medication, have