Privacy Policy
Last updated:
1. Information We Collect
Contact & Order Data
- Name, email, phone, billing/delivery address
- Order items, totals, payment status
Technical & Usage Data
- Device, browser, IP (approx. region), pages viewed
- Cookies & analytics events
2. Purposes & Legal Bases (UK GDPR)
- Process orders & deliver goods — performance of a contract.
- Customer support & safety — legitimate interests.
- Analytics & site improvement — legitimate interests (with cookie choices).
- Marketing emails — consent (opt-in, opt-out anytime).
- Legal/Tax compliance — legal obligation.
3. Sharing
We share personal data with payment processors, couriers, hosting and analytics providers under contracts that include appropriate safeguards. We do not sell personal data.
4. International Transfers
Where data is transferred outside the UK/EEA, we rely on adequacy decisions or Standard Contractual Clauses.
5. Retention
- Order records: typically 6 years (tax/legal).
- Support messages: up to 24 months.
- Marketing consent logs: duration of subscription + 24 months.
6. Your Rights
Requests You Can Make
- Access a copy of your data
- Rectification or erasure (“right to be forgotten”)
- Restriction or objection to processing
- Data portability (where applicable)
How to Exercise
Email COZYWEAVELTD@outlook.com with proof of identity and a clear description of your request. We respond within 30 days.
7. Cookies
We use necessary cookies (cart, session) and, subject to consent, analytics/marketing cookies.
8. Security
We apply administrative and technical measures such as encryption in transit, access controls and minimisation. No method is 100% secure; please keep your credentials private.
9. Children
Our website is not directed to children under 16. If we learn we hold such data without consent, we will delete it.
10. Complaints
You may contact the UK ICO (ico.org.uk) in addition to contacting us.
11. Changes
We may update this Policy; a new “Last updated” date will appear above.