Privacy Policy

Who we are

SOLOVYEV STORE (“we”, “us”) operates solovyev.store (the “Site”). We are a premium streetwear and sneakers consignment shop based in Haifa, Israel.

For privacy questions, contact us on WhatsApp at +972 58-734-5623 or Instagram @solovyev.store.

What data we collect

Account data: email address, password (hashed by our auth provider — we never store plaintext passwords), display name, and phone number if you provide one.

Marketing preferences: whether you opted in to marketing emails, when that preference last changed, and an audit record of consent changes (granted or withdrawn, privacy-policy version, source, and language).

Orders: cart contents, sizes, quantities, order amounts, order status, and the WhatsApp checkout link associated with your order.

Favorites and cart: product identifiers, sizes, and quantities synced to your account when you are signed in.

Technical data: authentication session cookies; for store administrators, a separate secure admin session cookie.

Browser local storage: guest cart items, theme preference (dark/light), language preference, and whether you dismissed our storage notice.

Analytics: if Google Analytics 4 is enabled on the Site, we collect usage data such as pages viewed, product views, add-to-cart, and checkout clicks. We also record limited first-party analytics events (event type and optional product id) on our servers; these events are not tied to your user id in our analytics table.

Sell / Trade submissions: category, brand/model, size, condition, wanted price, and notes are sent via WhatsApp only and are not stored as a separate application record in our database.

Messages you send us on WhatsApp or Instagram (including photos or delivery details) are processed on those platforms.

We do not collect payment card details on the Site. Online card payments are not processed on this website.

Why we use your data

To provide the Site, your account, cart, favorites, and order history.

To create and fulfil orders and to communicate about purchases, Sell / Trade, and support.

To keep the Site secure and prevent abuse.

To understand how the Site is used and to improve it.

To operate the store: authorized administrators may access customer accounts and order records in the admin panel to provide support, fulfil orders, and review internal order analytics (order counts, status breakdowns, and order values).

With your separate opt-in consent, to send marketing emails about news, drops, and offers, and to personalize those messages with your display name.

To comply with applicable law.

Marketing emails

Marketing emails are optional. We send them only if you actively opt in (for example during registration or in your account settings). The checkbox is never pre-selected.

If you opt in, we may use your email address and display name to send and personalize news, drops, and promotional offers.

You can withdraw consent at any time in your account email preferences. Unsubscribing from marketing does not affect service messages such as password resets or communications needed to fulfil an order.

We keep a record of when consent was given or withdrawn, which privacy-policy version applied, and where the choice was made, so we can demonstrate compliance.

We do not currently use a third-party email marketing provider. If we add one later, we will update this Privacy Policy and name that processor before using it for marketing sends.

Who we share data with

Supabase — database, authentication, file storage, and password-reset emails.

Vercel — website hosting and content delivery.

Google Analytics 4 — website analytics when configured.

WhatsApp (Meta) — order and Sell / Trade conversations after you leave the Site.

Instagram (Meta) — social media communication.

OpenStreetMap / Google Maps — map display or location links on the About page.

Courier or locker services (such as Boxit or Cheetah) — only when we share delivery details needed to ship your order.

Authorized store administrators — access customer profiles and orders solely to operate the store as described above.

We do not sell your personal data.

Cookies and local storage

Essential: Supabase authentication session cookies needed to keep you signed in. Administrators also use a secure admin session cookie.

Functional (local storage): shopping cart for guests, theme, language, and storage-notice preference.

Analytics: Google Analytics may set cookies or similar identifiers when GA is enabled. Our storage notice does not currently block analytics from loading; by continuing to use the Site you acknowledge this practice as described here.

How long we keep data

Account and profile data: while your account remains active, and for a reasonable period after a deletion request so we can complete the request and meet legal duties.

Orders: for as long as needed for fulfilment, accounting, disputes, and legal requirements.

Marketing consent records: for as long as needed to demonstrate when consent was given or withdrawn and to honour opt-out preferences.

Analytics: according to Google Analytics settings and our internal event retention practices.

Messenger conversations: according to the platform rules and our ordinary business practice.

Security

Passwords are hashed by Supabase Auth. Admin access is separated from customer accounts. No method of transmission or storage on the internet is 100% secure; we take reasonable measures but cannot guarantee absolute security.

Your rights

Depending on applicable law, you may request access to, correction of, or deletion of your personal data, and in some cases restriction of processing, objection, or data portability.

You may withdraw marketing consent at any time in your account without affecting the lawfulness of processing before withdrawal.

To make a request, message us on WhatsApp or Instagram and include the email address of your account. We will respond within a reasonable time.

Deleting your account may remove access to order history in your account area; we may retain certain order records where required by law or for legitimate business purposes.

Children

The Site is not directed at children under 18. If you are under 18, use the Site only with the involvement of a parent or guardian.

International transfers

Service providers such as Supabase, Vercel, Google, and Meta may process data on servers outside Israel. By using the Site you understand that your information may be transferred internationally as needed to operate the service.

Changes

We may update this Privacy Policy by posting a new version on this page with an updated date. Continued use of the Site after changes means you accept the revised policy to the extent permitted by law.

Contact

Questions about this policy? WhatsApp +972 58-734-5623 or Instagram @solovyev.store. Website: https://solovyev.store