Policy

This Privacy Policy is issued by Widsmob Limited (trading as "cozylace") ("we," "us," or "Super Socks"), registered at Hongkong, with contact information: support@cozylace.com. This policy governs the processing of personal data when you use our website (https://www.cozylace.com) and related services. By accessing our site, you consent to the practices described herein.


1. Data We Collect

 

We may collect the following personal data:

 

  • Identity & Contact Data: Name, age/date of birth, gender, postal addresses (billing/delivery), phone numbers, email address.
  • Social Media Handles: Links to your public social media profiles (e.g., Instagram, Twitter).
  • Transaction Data: Order details, payment records, shopping cart contents, and purchase history.
  • Behavioral Data: Browsing history, search queries, device information (IP address, browser type, device ID), and location data.
  • Communication Data: Feedback, survey responses, and correspondence with our customer support team.
  • Public Data: Information you share on public platforms (e.g., Instagram posts, YouTube comments) that relates to our products.
  • Children’s Data: Our site is not intended for users under 13, and we do not knowingly collect data from children.


2. How We Use Your Data (Lawful Bases under GDPR)


We process your data for the following purposes and legal bases:


  1. Order Fulfillment & Contractual Necessity (Article 6(1)(b)):
    • Processing payments, arranging deliveries (via partners like Royal Mail, DPD, DHL), and providing after-sales support.
  2. Legitimate Interests (Article 6(1)(f)):
    • Sending marketing communications (e.g., promotions, product updates) via email, SMS, or post (you may opt out at any time).
    • Analyzing browsing behavior to optimize site functionality and personalize your experience.
    • Monitoring communications for quality control and training.
  3. Consent (Article 6(1)(a)):
    • Sending personalized marketing emails (requires explicit opt-in).
    • Using cookies for retargeting ads on platforms like Facebook, Instagram, and Google Ads.
We will never share your data for marketing with third parties without your consent.


3. Data Retention


We retain data only as long as necessary:


  • Order Data: Up to [X] years for legal compliance (e.g., tax records) and dispute resolution.
  • Marketing Data: Deleted within 30 days of your opt-out request.
  • Log Data: Retained for [X] months for security and analytics purposes.


4. Your Rights Under GDPR


You may:


  • Access: Request a copy of your data via hello@supersocks.com or write to:Privacy Officer, Super Socks, Unit 1B, Heath Farm, Alcester Road, B47 6AJ, UK.
  • Correct/Delete: Update inaccurate data or request erasure (e.g., if data is no longer necessary).
  • Restrict Processing: Ask us to pause processing in certain cases (e.g., during a data accuracy dispute).
  • Data Portability: Obtain your data in a structured format for transfer to another provider.
  • Object to Marketing: Unsubscribe from emails via the "Unsubscribe" link or email hello@supersocks.com with "No Marketing" in the subject line.
We respond to requests within one month of receipt.


5. Data Sharing with Third Parties


We share data with trusted partners under strict confidentiality agreements:


  • Service Providers: Logistics companies (e.g., DHL), payment processors (e.g., Stripe), and email marketing platforms (e.g., Mailchimp).
  • Fraud Prevention Agencies: To verify identities and prevent unauthorized transactions.
  • Ad Networks: For retargeting ads (e.g., Google Ads, Facebook), using cookies to display relevant content.
We do not sell, rent, or trade your personal data for third-party marketing.


6. Cookies and Tracking Technologies


We use cookies to:


  1. Functionality: Remember preferences (e.g., language, cart contents).
  2. Analytics: Measure site traffic and user behavior (e.g., Google Analytics).
  3. Personalization: Deliver tailored ads based on your browsing history (retargeting cookies).
  4. Security: Monitor for fraudulent activity.


You may disable cookies via your browser settings, but this may affect site functionality.


7. International Data Transfers


Data may be processed outside the EU (e.g., U.S. cloud servers). To protect transfers, we use:


  • EU-U.S. Data Privacy Framework certifications or
  • Standard Contractual Clauses (SCCs) as required by GDPR.


8. Third-Party Links
Our site may contain links to external sites with separate privacy policies. We are not responsible for their practices; always review their policies before sharing data.


9. Security
We protect data via encryption (TLS 1.3), access controls, and regular security audits. In the event of a breach, we will notify regulators within 72 hours.


10. Policy Updates
We may update this policy periodically. Revisions will be posted on our site with the new effective date. Your continued use of the site constitutes acceptance of changes.


11. Contact Us


For questions, contact:


  • Data Protection Officer: support@cozylace.com


You may also file a complaint with your local data protection authority (e.g., ICO for UK users).