Privacy Policy

This Privacy Policy explains how ABIS Consulting Limited (registered in England and Wales, company number 11912324, registered office 20-22 Wenlock Road, London, N1 7GU), trading as CholaVerse (“CholaVerse”, “we”, “us”, “our”), collects, uses and protects your personal data when you use our website at cholaverse.com or our platform at app.cholaverse.com (together, the “Services”).

We are the data controller for personal data collected through the Services. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What data we collect

We collect the following categories of personal data:

• Account data: name, email address, business name, role, password (stored hashed), preferences.
• Billing data: billing address, VAT number, payment card details (processed by our payment provider; we do not store full card numbers).
• Usage data: log data, pages viewed, features used, IP address, device and browser information.
• Customer data: data you upload or generate while using the Services, including orders, customers, products, invoices, and messages. You retain ownership of all customer data — we process it on your behalf.
• Integration data: when you connect third-party services (Shopify, eBay, Amazon, banks, couriers, etc.), we receive data from those services as authorised by you.
• Communication data: emails, chat messages and support requests you send us.

2. How we use your data

We process your personal data for the following purposes and on the following lawful bases under Article 6 UK GDPR:

• To provide the Services (performance of contract).
• To process payments and manage your subscription (performance of contract).
• To improve and secure the Services (legitimate interest).
• To communicate with you about your account, service updates, and important notices (legitimate interest / performance of contract).
• To send marketing communications (consent — you can unsubscribe at any time).
• To comply with legal obligations (legal obligation).

3. Who we share your data with

We do not sell your personal data. We share data only with the following categories of recipients:

• Service providers and sub-processors — including hosting infrastructure, email delivery, payment processing, customer support tools, and AI model providers — under written agreements that require them to protect your data.
• Third-party platforms you connect — when you authorise integrations with Shopify, eBay, Amazon, banks, couriers, etc., data flows between us and those services as you direct.
• Professional advisers — accountants, auditors, and legal advisers, where necessary.
• Authorities — where required by law, court order, or to protect our rights.

A current list of our sub-processors is available on request from hello@cholaverse.com.

4. International transfers

Your data is primarily stored in the UK and EU. Where data is transferred outside the UK or EEA (for example, to certain AI service providers in the US), we rely on appropriate safeguards including the UK International Data Transfer Agreement (IDTA), Standard Contractual Clauses, or adequacy decisions made by the UK Government.

5. How long we keep your data

We keep your personal data for as long as your account is active and for a reasonable period afterwards, in line with our legitimate interests, contractual obligations, and statutory record-keeping requirements (typically up to 7 years for financial records under UK tax law).

You can request deletion of your data at any time, subject to legal exceptions. See section 6.

6. Your rights

Under UK GDPR you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, commonly used format.
• Objection — object to processing based on legitimate interest, or to direct marketing.
• Withdraw consent — where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email hello@cholaverse.com. We will respond within one month of receiving your request.

7. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, regular security reviews, and trained staff. No system is 100% secure; we will notify the ICO and affected users in accordance with UK GDPR if a notifiable breach occurs.

8. Cookies

We use a small number of cookies to provide and improve the Services. See our Cookies Policy for details.

9. Children

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest revision. For material changes, we will notify you via email or a prominent notice in the Services.

11. Contact us

For any privacy-related questions, requests or complaints:

Email: hello@cholaverse.com
Postal address: ABIS Consulting Limited, 20-22 Wenlock Road, London, N1 7GU, UK

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.