Privacy policy

Last updated: 25 September 2026

Cosy Cloud Co. operates this website and online store to provide you with our products and related services.

Our store is powered by Shopify.

This Privacy Policy explains how we collect, use, store and share personal information when you browse our website, place an order, contact us, sign up for marketing or otherwise interact with Cosy Cloud Co.

By using our website, you acknowledge that you have read this Privacy Policy.

Personal information we collect

Depending on how you interact with Cosy Cloud Co., we may collect information including your name, email address, telephone number, billing and delivery address, order information, payment and transaction information, account information, communications with us, IP address, device and browser information, and information about how you use our website.

Payment information is generally processed securely by our payment providers rather than stored directly by Cosy Cloud Co.

How we collect information

We may obtain information directly from you when you place an order, complete a form, create an account, sign up for marketing or contact us.

We may also receive information automatically through cookies and similar technologies, from Shopify and other service providers that help us operate the store, and from advertising, analytics, fulfilment, delivery or other business partners.

How we use your information

We may use personal information to process and fulfil orders; take and verify payments; arrange delivery; provide customer service; process returns and refunds; communicate with you about orders; detect and prevent fraud; improve our website and customer experience; operate and secure our services; comply with legal obligations; and, where permitted, provide marketing and advertising.

Where you have subscribed to marketing, we may send information about new products, offers and Cosy Cloud Co. news. You can unsubscribe from marketing emails at any time using the unsubscribe link contained within them.

Our lawful bases for processing

Where UK data-protection law applies, we process personal information where necessary to perform a contract with you, comply with a legal obligation, pursue our legitimate business interests where those interests do not override your rights, or where you have provided consent.

Where processing relies on consent, you may withdraw that consent at any time.

How we share information

We may share personal information where necessary with service providers that help us operate our business, including Shopify, payment providers, fulfilment and supplier partners, delivery companies, IT and hosting providers, analytics providers, customer-service providers and marketing or advertising platforms.

We may also disclose information where required by law, to prevent fraud or protect our legal rights, or as part of a legitimate corporate transaction.

We only share information where there is an appropriate reason to do so.

Shopify

Our online store is powered by Shopify.

Shopify processes certain personal information when you access or use the store, including information necessary to provide ecommerce functionality and improve Shopify's services.

Information submitted through our store may therefore be processed by Shopify and other service providers in countries outside the country where you live.

You can learn more about Shopify's handling of personal information through Shopify's own Consumer Privacy Policy.

Your original Shopify privacy template contains further explanation of this relationship and the enhanced features Shopify may provide. Pasted markdown

Cookies and advertising

Our website may use cookies and similar technologies to operate the store, remember your preferences, understand how visitors use the website, measure advertising performance and provide more relevant advertising.

Some cookies are necessary for the website to function.

Where required, non-essential cookies such as advertising or analytics cookies will only be used in accordance with applicable consent requirements.

Your cookie banner and privacy settings allow you to manage applicable preferences.

The ICO states that visitors should be told when cookies are used and that consent is generally needed for cookies that are not strictly necessary. ICO

Marketing communications

If you sign up to receive marketing communications, we may contact you about products, promotions, new launches and other Cosy Cloud Co. news.

You may unsubscribe at any time by clicking the unsubscribe link in an email or contacting us at hello@cosycloudco.com.

Unsubscribing from marketing will not prevent us from sending essential communications relating to your orders or account.

Data retention

We retain personal information for only as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, maintaining appropriate business and transaction records, resolving disputes, preventing fraud and meeting legal, accounting and tax obligations.

The exact retention period may vary according to the type of information and our legal obligations.

Security

We use reasonable technical and organisational measures designed to protect personal information.

However, no internet transmission or storage system can be guaranteed to be completely secure.

Please do not send sensitive payment information or passwords to us by email.

International transfers

Some of our service providers, including Shopify and other technology partners, may process information outside the United Kingdom.

Where applicable law requires safeguards for international transfers, appropriate legal mechanisms will be used.

Your privacy rights

Depending on the law that applies to you, you may have rights including the right to access personal information we hold about you, request correction of inaccurate information, request deletion in certain circumstances, restrict or object to certain processing, receive certain information in a portable format and withdraw consent where processing is based on consent.

You may also object to or opt out of certain direct marketing.

To exercise a privacy right, contact:

hello@cosycloudco.com

We may need to verify your identity before fulfilling a request.

Complaints

If you have concerns about how your personal information has been handled, please contact us first at hello@cosycloudco.com so that we can investigate.

If you are in the United Kingdom, you may also have the right to complain to the Information Commissioner's Office (ICO).

Children's privacy

Our services are not intended to be used by children to make purchases independently.

We do not knowingly seek to collect personal information from children in circumstances where doing so would be inappropriate.

Third-party links

Our website may contain links to third-party websites or services.

Those websites operate under their own privacy practices, and Cosy Cloud Co. is not responsible for the privacy or security practices of websites we do not control.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, services or legal obligations.

The latest version will be published on this website with an updated revision date.

Contact

For questions about this Privacy Policy, how we use personal information or to exercise your privacy rights, contact:

hello@cosycloudco.com