Security, privacy and certifications
Loviux is an online shop certified to ISO/IEC 27001, ISO/IEC 42001 and the Spanish National Security Framework (ENS), medium category. It is a shop of Hiloud Solutions, S.L., holder of the certificates (OCA Instituto de Certificación): the website, the server, payments and your data are within its certified system. Here we explain what that means for you and how to check it.
Who is behind Loviux and who handles your data
Loviux is a shop of KIWOP – Hiloud Solutions, S.L. (tax ID B43990076), its owner and the holder of the certificates. It is the company named in our legal notice and the data controller under our privacy policy.
The shop is run by two people, Antonia Gómez and Josep Purroy, with the help of Lova, our artificial intelligence. Kiwop's technical team maintains the website and the server.
The three certificates
They are issued by OCA Instituto de Certificación in the name of KIWOP – Hiloud Solutions, S.L., the company that owns Loviux, which is what you will see if you check them on its website. Each one has its number, its dates and a link to OCA's website that shows whether it is still valid. All three are also listed at kiwop.com/certificaciones.
-
ISO/IEC 27001
Information security management system.
- Holder
- KIWOP – Hiloud Solutions, S.L. (B43990076)
- Standard
- UNE-EN ISO/IEC 27001:2023
- Certificate number
- 34/5700/26/09070
- Granted
- 14 September 2026
- Valid until
- 14 September 2029
- Certification body
- OCA Instituto de Certificación, accredited by ENAC
-
ISO/IEC 42001
Artificial intelligence management system.
- Holder
- KIWOP – Hiloud Solutions, S.L. (B43990076)
- Standard
- ISO/IEC 42001:2023
- Certificate number
- 34/5707/26/09140
- Granted
- 22 September 2026
- Valid until
- 22 September 2029
- Certification body
- OCA Instituto de Certificación
-
Spanish National Security Framework (ENS), medium category
Compliance with Spain's Royal Decree 311/2022 at medium category in all five security dimensions: confidentiality, integrity, traceability, authenticity and availability.
- Holder
- KIWOP – Hiloud Solutions, S.L. (B43990076)
- Standard
- Real Decreto 311/2022
- Certificate number
- 34/5704/26/09170
- Granted
- 24 September 2026
- Valid until
- 24 September 2028
- Certification body
- OCA Instituto de Certificación
What it means for you
- The website, the server, payments and your data sit within an information security management system audited by an independent body.
- An example of how it works: the PHP 8.4.27 security update, for the language the website runs on, was released on 21 October 2026 and we installed it on our server the same day.
- Lova, the AI we use, runs within an artificial intelligence management system certified to ISO/IEC 42001.
- Certificates do not last forever: the ISO ones are valid for three years and the ENS one for two, and keeping them means passing new audits.
- We never see your card number: it is handled by Stripe, our payment provider.
- We do not sell your data, we do not use it for personalised advertising or to build profiles from what you buy, and we do not pass it to anyone for their own marketing.
What they cover and what they do not
The scope of the certificates is the information systems KIWOP – Hiloud Solutions, S.L. uses to design, develop, implement, maintain and operate digital applications, hosting and online presence, and applied artificial intelligence. Everything that makes the Loviux online shop work is included: the website, the server, payments, the data and Lova, our AI.
- They do not certify the products we sell: certifying a product is up to its manufacturer. What we know about each product is on its product page, with its material and the manufacturer's documentation when we have it.
- They do not cover other companies involved in your order, such as the payment provider or the carriers, which are responsible for their own part.
Frequently asked questions
Is it safe to shop at Loviux?
Loviux is an online shop certified to ISO/IEC 27001 and the ENS, medium category: the website, the server, payments and your data are within the certified system. The website is encrypted (HTTPS), payments are processed by Stripe and we never see your card number, and your order travels in discreet packaging.
Who handles my data?
KIWOP – Hiloud Solutions, S.L. (tax ID B43990076), the company that owns Loviux, is the data controller, and your data is within its certified system. We use it to process your order and help you, and for the other purposes set out in the privacy policy, which explains what data we process, why, how long we keep it and who else receives it.
How do you use artificial intelligence?
Lova, our AI, writes and translates product pages, guides and comparisons and answers in the shop's chat. Antonia and Josep set the rules for what gets published and answer for it, and every text goes through checks before it is published, as we explain in "How we verify information". Lova runs within the artificial intelligence management system certified to ISO/IEC 42001.
What exactly is certified?
The online shop: the website, the server, payments, your data and Lova, our AI, are within the certified system audited by OCA. The certificates are held by KIWOP – Hiloud Solutions, S.L., the company that owns Loviux, which is what you will see when you check them with OCA. They do not certify the products we sell, as that is up to their manufacturer, or other companies, such as the payment provider or the carriers.
How can I check the certificates?
Each certificate on this page has a link to the website of OCA Instituto de Certificación, which shows whether it is valid, and another to its PDF. They are also listed at kiwop.com/certificaciones.
A question about your data?
Write to us at info@loviux.co.uk and we will get back to you.