Privacy policy

Privacy Policy

This Privacy Policy explains how Cozora ("we", "us") collects, uses, shares and protects personal information when you visit or make a purchase from https://cozoraco.com (the "Site").

1. Information we collect

Information you give us. Name, email address, shipping address, billing address, phone number, order contents, and any message you send us. Payment card details are entered directly with our payment processor and are never stored on our systems.

Information collected automatically. IP address, browser type and version, device type, operating system, time zone, referring page, pages viewed, products viewed, and interactions with the Site. We collect this through cookies, log files, pixels and similar technologies.

Information from third parties. Advertising and analytics partners may provide us with aggregated data about how you reached the Site.

We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

2. Cookies and tracking technologies

We use the following categories:

Category	Purpose	Who sets it	Typical duration
Strictly necessary	Cart, checkout, security, fraud screening	Shopify	Session to 2 years
Analytics	Understanding how the Site is used	Shopify Analytics	Up to 2 years
Advertising	Measuring and targeting our advertising	Meta Platforms (Meta Pixel)	Up to 90 days
Reviews	Displaying customer reviews	Judge.me	Up to 1 year

Strictly necessary cookies load on every visit. Analytics and advertising cookies load only after you accept them in our cookie banner. You can change your choice at any time through the banner link in the Site footer, or through your browser settings.

We honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we treat it as a valid request to opt out of the sale and sharing of your personal information for targeted advertising.

3. How we use your information

To process, fulfill, ship and invoice your order.
To communicate with you about your order and to provide customer support.
To screen orders for fraud and to protect the Site.
To send you marketing communications, where you have opted in, and to measure their effectiveness.
To measure and improve our advertising, including through the Meta Pixel.
To comply with legal obligations, including tax, customs and accounting.

We share personal information only with the providers who need it to operate the store: our e-commerce platform and payment processor, our advertising and analytics providers, our fulfillment and shipping providers, and, where required, customs authorities and law enforcement. Advertising measurement is carried out through the Meta Pixel, provided by Meta Platforms, Inc.

We do not sell your personal information for money. Sharing data with Meta for targeted advertising may qualify as a "sale" or "sharing" under some United States state privacy laws. You can opt out at any time, see the section on your rights below.

Our legal bases for processing are: performance of a contract (order processing), legitimate interest (fraud prevention, Site improvement, direct marketing to existing customers), consent (advertising and analytics cookies, marketing emails and SMS) and legal obligation (tax and customs records).

4. International transfers

We work with service providers located in the United States, the European Economic Area and Asia, so your personal information may be transferred across borders. Where personal information is transferred out of the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or on an adequacy decision.

5. Your rights

Depending on your state of residence you may have the right to:

know what personal information we hold about you and obtain a copy of it;
correct inaccurate personal information;
request deletion of your personal information;
opt out of the sale or sharing of your personal information, and of targeted advertising;
not be discriminated against for exercising these rights;
appeal a decision we make on your request.

To exercise any of these rights, email support@cozoraco.com with the subject line "Privacy request". We will verify your identity by matching the details you provide against your order records, and we will respond within 45 days. If we decline your request, you may appeal by replying to our decision, and we will answer the appeal within 45 days. California residents may also contact the California Attorney General.

To opt out of targeted advertising without contacting us, decline advertising cookies in our banner, or enable Global Privacy Control in your browser.

6. How long we keep it

Order and transaction records: 10 years, as required by the accounting and tax law applicable to us.
Customer account and contact details: for as long as your account is active, then 3 years after your last interaction with us.
Marketing consent records: 3 years after your last interaction, or until you unsubscribe.
Analytics and advertising data: up to 25 months.
Customer support correspondence: 3 years.

7. Security

We use TLS encryption on the Site, and we restrict access to personal information to the people who need it to do their work. Payment card data is handled by our PCI DSS compliant payment processor and never reaches our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Changes

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. Material changes will be announced on the Site.