Privacy Policy

Who we are

Sales Core B.V. is a private limited company incorporated under the laws of the Netherlands (registration no. KvK 95115714). We trade as KOVA and are the business responsible for the personal information processed in connection with your use of takekova.com.

We serve customers in the United States. We handle personal information in accordance with applicable U.S. federal and state privacy laws, including the California Consumer Privacy Act as amended by the CPRA, and comparable laws in states such as Virginia, Colorado, Connecticut, Utah, Texas, and Oregon. Which rights apply to you depends on your state of residence.

What data we collect — and when

2.1 Data you provide directly

• Account & order data — name, email address, delivery address, billing address, telephone number (optional)
• Subscription data — chosen subscription tier, billing frequency, preferred payment method, subscription history
• Payment data — we do not store your full card number or bank details; these are processed directly by Shopify Payments and PayPal
• Communications — any message, question, or complaint you send us via email, live chat, or social media
• Quiz responses — if you complete our "Is KOVA right for you?" wellness quiz, we use your answers to show your results during your visit. We do not store your quiz answers or link them to your identity
• Reviews & testimonials — any review you submit on our website or via a third-party review platform

2.2 Data collected automatically

• Device & browsing data — IP address, browser type and version, operating system, pages visited, time on page, click paths
• Cookies & tracking — we use cookies and similar technologies as described in our Cookie Policy. You can opt out of non-essential cookies and of the sale or sharing of personal information as described there and in Section 06
• Purchase & subscription behaviour — order frequency, subscription status, renewal history, cancellations, pauses

2.3 Data from third parties

• Analytics partners — traffic and usage data from Google Analytics 4
• Advertising platforms — Meta and Google may share conversion signals with us in connection with our advertising
• Review platforms — third-party review platforms may provide us with review data associated with your order

We do not purchase personal information from data brokers, and we do not sell your personal information. KOVA is intended for adults aged 18 and over; we do not knowingly collect personal information from children under 13 (or under 16 where applicable state law provides). We do not store wellness-quiz answers or link them to your identity. See Section 07 for how we approach consumer health data.

Why we use your data

The table below sets out how we use your information and how long we keep it.

Marketing communications — your choices

We send marketing emails in accordance with the CAN-SPAM Act. You can opt out at any time by clicking the unsubscribe link in any marketing email, contacting us at hello@takekova.com, or updating your preferences in your account portal; we honor opt-out requests promptly. Opting out of marketing does not affect transactional emails (order confirmations, shipping updates, renewal reminders).

Who we share your data with

We do not sell your personal information for money. However, our use of advertising and analytics partners (such as Meta and Google) may be considered a "sale" or "sharing" of personal information for targeted advertising under some state laws. You can opt out — see Section 06.

We share personal information only with service providers who help us operate our business:

We may also disclose information to comply with law, enforce our terms, or protect our rights, and in connection with a business transfer such as a merger or acquisition.

Your privacy choices — Do Not Sell or Share

Depending on your state, you have the right to opt out of the sale or sharing of your personal information and of targeted advertising. You can exercise these choices by:

• Using the "Do Not Sell or Share My Personal Information" link in our website footer
• Adjusting your choices in our cookie banner or preferences tool
• Emailing us at hello@takekova.com

We also honor opt-out preference signals, including the Global Privacy Control (GPC), where required. When you enable GPC in your browser, we treat it as a request to opt out of sale/sharing for that browser or device.

Consumer health data

Some state laws — such as Washington's My Health My Data Act, Nevada's consumer health data law, and Connecticut's health-data provisions — regulate "consumer health data." KOVA's approach is to minimise this data:

• We do not store your wellness-quiz answers or link them to your identity — they are used only to show your results during your visit
• We do not sell consumer health data
• If you share health-related details with our support team, we use them only to help with your question and to provide the service
• You can contact us at hello@takekova.com to ask about or exercise your rights over any such information

International data transfers

KOVA is operated from the Netherlands, and some of our service providers are located in the United States and other countries. This means the information you provide may be transferred to, stored, and processed in the United States, the Netherlands, and elsewhere. Wherever your information is processed, we protect it consistent with this policy and applicable law. You can ask us about our safeguards at hello@takekova.com.

How long we keep your data

• Order and transaction data: up to 7 years, to meet tax and business-records requirements
• Active subscription data: retained for the lifetime of your subscription plus up to 7 years
• Support communications: 3 years from your last contact with us
• Marketing records: retained until you opt out, plus a short administrative period
• Analytics data: 14 months maximum (Google Analytics 4 default)
• Advertising pixels: 90 days maximum

When a retention period expires, we securely delete or de-identify the data.

Your privacy rights

Depending on your state of residence, you may have the following rights over your personal information:

• Right to know / access — request the categories and specific pieces of personal information we hold about you
• Right to delete — request that we delete personal information we hold about you
• Right to correct — ask us to correct inaccurate personal information
• Right to data portability — receive a copy of your personal information in a portable format
• Right to opt out — opt out of the sale or sharing of personal information and of targeted advertising (see Section 06)
• Right to limit use of sensitive personal information — where applicable
• Right to non-discrimination — we will not discriminate against you for exercising your rights

How to raise a concern

We would always prefer to resolve any concern directly first — please reach out to us at hello@takekova.com before escalating.

You also have the right to contact a regulator. You may contact the Attorney General in your state of residence. California residents may also contact the California Privacy Protection Agency (CPPA).

How we protect your data

• All data is transmitted over HTTPS with TLS encryption
• Access to customer data is restricted on a need-to-know basis with role-based access controls
• Two-factor authentication (2FA) is enforced on all administrative accounts
• We maintain safeguards and an incident-response process, and will notify affected individuals of a data breach as required by applicable law

Contact & changes

We will update this Privacy Policy when our practices change. For active subscribers, we will notify you by email at least 14 days before material changes take effect. The version number and effective date at the top of this document will always reflect the most current version.