🔒

1) Who we are

We are CosyCrest (“we”, “us”, “our”). Our website address is https://cosycrest.co.uk. We respect your privacy and are committed to protecting your personal data.

2) What data we collect

• Identity & Contact: name, email, phone, billing/shipping address.
• Order & Payments: order details, transaction references (card details are processed by Stripe/PayPal; we do not store full card numbers).
• Technical: IP address, browser/user agent, pages visited, time on site, device type.
• Communications: messages sent via contact forms or email, support requests, reviews.
• Media (if you upload): avoid uploading images with EXIF GPS location data.

3) Cookies

We use cookies to operate our site, remember your preferences, and improve performance. You can control cookies in your browser settings. Disabling cookies may affect some features (e.g., login, cart).

• Session cookies: essential for site operation; expire when you close the browser.
• Preference cookies: remember choices like currency or display options.
• Analytics/Performance cookies: help us understand site usage and improve experience.

4) Embedded content from other websites

Articles on this site may include embedded content (e.g., videos, images). Embedded content from other websites behaves as if you visited the other website. Those sites may collect data, use cookies, and track your interaction with the embedded content.

5) Payments (Stripe & PayPal)

We use third-party payment processors: Stripe and PayPal. When you make a purchase, payment data is processed directly by these providers under their privacy policies. We receive confirmation of payment and limited details necessary to fulfill your order.

• Stripe Privacy: stripe.com/privacy
• PayPal Privacy: paypal.com/privacy

6) Who we share your data with

• Couriers & logistics for delivery.
• Payment processors (Stripe/PayPal) for secure transactions.
• IT/Hosting providers to run our website.
• Fraud & legal authorities if required by law or to protect our rights.

We do not sell your personal data.

7) How long we retain your data

• Orders: kept for tax/accounting and warranty purposes (commonly up to 6 years in the UK).
• Accounts: kept while your account is active. You can request deletion.
• Comments/Reviews: kept indefinitely to recognise and approve follow-ups automatically.
• Contact form messages: typically 12–24 months for support/reference.

8) Your rights (UK/EEA GDPR)

Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal data; the right to data portability; and the right to object to certain processing (including direct marketing). You may also withdraw consent where processing is based on consent.

To exercise your rights, email us at rizwazaffarltd@gmail.com We may need to verify your identity before acting on a request.

9) Legal bases for processing

• Contract: to process and deliver your orders.
• Legal obligation: tax, accounting, and compliance.
• Legitimate interests: site security, fraud prevention, service improvement.
• Consent: marketing emails or optional cookies (where applicable).

10) How we protect your data

We use SSL encryption, access controls, secure hosting, and regular updates to protect your information. No method of transmission over the Internet is 100% secure, but we strive to use commercially acceptable means to safeguard your data.

11) Children’s privacy

Our services are not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us to remove it.

12) Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last Updated” date above.

13) Contact

Questions or requests about this Privacy Policy? Contact us at rizwazaffarltd@gmail.com