Privacy Policy

Safeguarding personal information is an important responsibility for any business that operates through digital channels. This Privacy Policy describes the general ways information may be obtained, handled, stored, shared, and protected when customers interact with the company through its website, online services, social platforms, customer care channels, promotional activities, and other connected digital experiences. By using these services, individuals understand that information associated with their interactions may be handled according to the practices described in this policy.

Information can be provided directly by customers in many different circumstances. For example, data may be collected when a visitor browses the website, registers for an account, purchases merchandise, signs up for newsletters, responds to surveys, contacts customer service, submits product feedback, writes reviews, participates in promotions, interacts with advertisements, or communicates with the company in another permitted manner. Depending on the interaction, this information may include a person’s name, email address, phone number, billing or mailing address, account information, device-related identifiers, and other details voluntarily submitted.

Order-related information may also be maintained to support normal business operations. This can include purchase records, transaction information, shipping details, payment-related data, order status, and customer service history. Certain technical information may be gathered automatically when customers use digital services. Examples can include browser type, operating system, device characteristics, approximate location, referring website, network information, pages visited, and interactions with website features. This information can help the company understand how its digital services operate and identify opportunities to improve usability, reliability, and security.

The company may also obtain information through selected third parties. These sources can include technology providers, payment services, logistics companies, marketing partners, referral services, analytics providers, and other organizations that lawfully support business activities. Information received from these sources may be combined with information collected directly from customers when appropriate and permitted.

Cookies, pixels, tags, and comparable technologies may be used across digital properties. These tools can help websites remember preferences, maintain items in a shopping cart, recognize returning visitors, measure traffic, understand interactions, improve site functionality, and evaluate promotional campaigns. Certain tracking technologies may also support more relevant advertising or marketing experiences. Depending on the browser, device, or service being used, individuals may have options to adjust cookie settings or limit particular forms of tracking. Some website functions may not operate correctly if certain technologies are disabled.

Information collected through these interactions may be used for a range of operational and commercial purposes. The company may process information to complete purchases, confirm transactions, coordinate deliveries, manage customer accounts, respond to questions, provide support, administer promotions, communicate about orders, maintain digital services, analyze customer activity, improve products, detect suspicious behavior, prevent fraud, protect systems, and meet applicable legal requirements. Customer information may also help the company understand general preferences and identify ways to improve products, communications, and the overall shopping experience.

Marketing communications may be sent when permitted by law and in accordance with applicable customer preferences. Promotional messages can include information about products, services, special events, offers, launches, or other business updates. Customers may have the ability to unsubscribe from certain promotional communications through the instructions included in those messages or through available account and privacy controls. Transactional communications, such as order confirmations, shipping notices, account notifications, or service-related messages, may continue when necessary to complete or support a requested transaction.

Personal information is generally retained only for as long as reasonably appropriate for legitimate business purposes. The length of time information remains available can depend on the type of data involved, the reason it was collected, customer account requirements, accounting obligations, legal requirements, regulatory considerations, potential disputes, security needs, and other operational factors. Once information is no longer reasonably necessary, appropriate steps may be taken to remove it, anonymize it, or otherwise dispose of it in a secure manner, subject to applicable retention obligations.

To operate its services effectively, the company may work with outside organizations that process information on its behalf. These organizations may include payment processors, fulfillment and delivery providers, hosting and technology companies, analytics services, marketing providers, customer service platforms, fraud prevention specialists, and information security vendors. Such parties may receive access to information that is necessary for their assigned functions and are expected to handle it in accordance with applicable contractual, confidentiality, and security requirements.

Information may also be disclosed in circumstances where disclosure is legally required or reasonably necessary to protect legitimate interests. This may include responding to valid legal processes, government requests, regulatory obligations, investigations, or court orders. Information may be used or disclosed when necessary to identify fraudulent activity, investigate security problems, enforce applicable terms, protect company property, or help safeguard customers, employees, service providers, and other individuals. If the company participates in a merger, acquisition, restructuring, financing, sale of assets, or comparable corporate transaction, relevant information may also be transferred as part of that transaction.

Protecting children online is another consideration in responsible data management. The company does not intentionally seek personal information from children who are below an age at which such collection is permitted under applicable law. If the company becomes aware that information was obtained from an individual who does not meet the applicable age requirements, reasonable measures may be taken to remove the information. Parents or legal guardians who have concerns about information belonging to a minor may contact customer support or the privacy team for assistance.

Some portions of the company’s digital presence may allow customers to publish material for others to see. Reviews, comments, community discussions, social media activity, and similar features can involve information that becomes publicly accessible. Customers should consider carefully what they choose to disclose through these areas. Once information has been posted publicly, it may potentially be viewed, copied, collected, or redistributed by other individuals, and the company cannot necessarily control how independent third parties use publicly available content.

Reasonable safeguards are maintained to reduce the risk of unauthorized access, improper use, alteration, loss, or disclosure of personal information. Security practices may involve access restrictions, technical controls, encryption, monitoring, internal procedures, administrative safeguards, and other protective measures appropriate to the nature of the information and the services being provided. Despite these efforts, no website, network, electronic communication, or storage system can be guaranteed to remain completely secure. Customers should therefore also take reasonable precautions when protecting their accounts and personal information.

Privacy rights can differ depending on where a customer lives and which laws apply. Depending on the circumstances, individuals may have rights to learn what personal information is maintained about them, obtain copies of certain information, correct inaccurate details, request deletion, object to particular forms of processing, limit certain uses, request data portability, withdraw consent where consent serves as the legal basis, or control certain marketing communications. The availability and scope of these rights may vary according to applicable legislation and specific circumstances.

Requests concerning privacy rights may require reasonable verification of the requester’s identity. Verification helps prevent unauthorized individuals from obtaining, modifying, or deleting another person’s information. Where an authorized representative submits a request, additional documentation or confirmation may be required when permitted by applicable law. Requests are generally handled according to the requirements and timeframes established by the relevant privacy regulations.

Privacy practices may evolve as technology, business operations, legal requirements, and customer expectations change. The company may update this policy when necessary to reflect new practices, services, technologies, or regulatory developments. When changes are made, the revised policy may be made available through the company’s digital services so customers can review the current approach to information management.

Questions about privacy, information processing, data protection, or the exercise of applicable privacy rights may be directed to the company’s privacy support team. Customers can reach the team by email at cozyearthusa@outlook.com or by telephone at (129) 987-9875. The company seeks to maintain clear communication around its information practices while continuing to improve the safeguards, procedures, and controls used to responsibly manage customer information throughout its business operations.