Security
Security Security
How we safeguard customer data, how payments are protected, and how to report a security issue.
1. Overview
Sovors uses layered technical and organisational controls to protect information from unauthorised access, loss or misuse. We review these controls regularly and improve them as the store grows.
2. Platform and infrastructure
- The store is hosted on Shopify, a PCI DSS Level 1 certified platform with 24/7 monitoring.
- All traffic is encrypted in transit with TLS 1.2 or newer; stored data is encrypted at rest by the platform.
- Access to the store admin is limited to named staff accounts protected by two-step verification.
3. Payments
Card payments are handled by Shopify Payments and PayPal. Card numbers are entered on their secure pages and never stored on our servers. Express options such as Google Pay and Shop Pay use tokenised payments.
4. Your account and data
- Account passwords are stored only as salted hashes by the platform.
- We keep order data only as long as needed for delivery, support, accounting and legal obligations.
- Marketing emails and push notifications are opt-in and can be stopped at any time.
5. Tips to protect yourself
- We will never ask for your password or full card number by email or chat.
- Only pay through sovors.com checkout pages. Our emails come from addresses ending in sovors.com.
- Use a unique password for your customer account.
6. Report a security issue
If you believe you have found a vulnerability or received a suspicious message that uses our name, email sovorsgadget@gmail.com with "Security" in the subject. Please give us reasonable time to investigate before sharing details publicly. We do not take legal action against good-faith researchers who respect customer data.
How we safeguard customer data, how payments are protected, and how to report a security issue.
1. Overview
Sovors uses layered technical and organisational controls to protect information from unauthorised access, loss or misuse. We review these controls regularly and improve them as the store grows.
2. Platform and infrastructure
- The store is hosted on Shopify, a PCI DSS Level 1 certified platform with 24/7 monitoring.
- All traffic is encrypted in transit with TLS 1.2 or newer; stored data is encrypted at rest by the platform.
- Access to the store admin is limited to named staff accounts protected by two-step verification.
3. Payments
Card payments are handled by Shopify Payments and PayPal. Card numbers are entered on their secure pages and never stored on our servers. Express options such as Google Pay and Shop Pay use tokenised payments.
4. Your account and data
- Account passwords are stored only as salted hashes by the platform.
- We keep order data only as long as needed for delivery, support, accounting and legal obligations.
- Marketing emails and push notifications are opt-in and can be stopped at any time.
5. Tips to protect yourself
- We will never ask for your password or full card number by email or chat.
- Only pay through sovors.com checkout pages. Our emails come from addresses ending in sovors.com.
- Use a unique password for your customer account.
6. Report a security issue
If you believe you have found a vulnerability or received a suspicious message that uses our name, email sovorsgadget@gmail.com with "Security" in the subject. Please give us reasonable time to investigate before sharing details publicly. We do not take legal action against good-faith researchers who respect customer data.

