Privacy Policy of CozyKnit Warmth

Effective Date: October 20, 2025

This Privacy Policy explains how CozyKnit Warmth (“we,” “us,” or “our”) collects, uses, stores, shares, and protects the personal information you (“you” or “user”) provide when accessing or using our website (www.cozyknitwarmth.com, “the Site”), purchasing our products, or interacting with our services (collectively, “Services”). We are committed to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), the California Consumer Privacy Act (CCPA) for users in California, and other regional privacy laws. By using our Site or Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

1. Information We Collect

We collect two types of information about you: personal information (data that identifies or can be used to identify you) and non-personal information (data that cannot be used to identify you individually).

1.1 Personal Information You Provide Voluntarily

You may choose to share personal information with us when using our Site or Services, including but not limited to:

• Account Information: When creating an account, you may provide your full name, email address, phone number, and a password.
• Order & Shipping Information: When placing an order, you will provide your shipping address, billing address, payment details (e.g., credit card number, PayPal account information), and order preferences (e.g., size, color).
• Communication Information: When contacting our customer support (via email, contact form, or phone), you may share additional details such as order numbers, product issues, or feedback.
• Mailing List Sign-Up: If you subscribe to our newsletter or promotional emails, you will provide your email address (and optionally your first name) to receive updates, discounts, and product announcements.

1.2 Personal Information We Collect Automatically

When you visit or use our Site, we may automatically collect personal information through cookies, web beacons, and other tracking technologies, including:

• Device & Browser Information: Your device type (e.g., smartphone, laptop), operating system (e.g., iOS, Windows), browser type (e.g., Chrome, Safari), device ID, and IP address.
• Browsing Data: Pages you visit on our Site, the time and date of your visits, the duration of your stay on each page, links you click, search queries you enter, and how you arrived at our Site (e.g., via a search engine or social media link).
• Location Information: With your consent (where required by law), we may collect your approximate geographic location based on your IP address to provide location-specific services (e.g., local shipping options).

1.3 Non-Personal Information

We may also collect non-personal information, such as aggregated browsing trends (e.g., “50% of users viewed our lounge knit collection”), anonymized order data (e.g., “most orders are for size M”), or demographic insights. This data is stripped of all identifying details and cannot be linked back to you individually.

2. How We Use Your Information

We use your personal information only for legitimate purposes that are disclosed in this Privacy Policy or communicated to you at the time of collection. These purposes include:

2.1 Fulfilling Orders & Providing Services

• Process, confirm, and ship your orders (e.g., using your shipping address to deliver products, using payment details to process transactions).
• Send order updates (e.g., “your order has shipped”) and delivery notifications via email or SMS.
• Provide customer support (e.g., resolving order issues, answering product questions) using your communication history and account details.

2.2 Improving Our Site & Services

• Analyze browsing and order data to identify user preferences, optimize Site navigation, and enhance product offerings (e.g., expanding sizes for popular items).
• Test new features, layouts, or marketing strategies to improve the user experience (e.g., simplifying the checkout process).

2.3 Personalization & Marketing

• Send personalized recommendations (e.g., “you may also like this fleece lounge set”) based on your browsing history and past purchases.
• Deliver promotional communications (e.g., newsletters, discount codes, new collection alerts) to subscribers who have opted in to receive marketing emails.
• Tailor advertising on our Site or third-party platforms (e.g., social media) to your interests, where permitted by law.

2.4 Compliance & Security

• Protect our Site and users from fraud, unauthorized access, or other security risks (e.g., verifying your identity when updating account details, monitoring for suspicious transactions).
• Comply with legal obligations, such as responding to court orders, tax requirements, or regulatory inquiries.
• Enforce our Terms of Service (e.g., addressing violations like fraudulent orders).

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information only in the following limited circumstances:

3.1 Third-Party Service Providers

We work with trusted third-party vendors to help us operate our Site and deliver Services. These providers are only given access to the personal information necessary to perform their tasks and are contractually obligated to protect your data and use it only as directed by us. Examples include:

• Payment Processors: Companies like PayPal or Stripe that process credit card transactions (we do not store full credit card details—these are encrypted and managed by our payment partners).
• Shipping & Fulfillment Partners: Carriers like UPS or DHL that deliver your orders (they receive your shipping address and order number).
• Marketing Tools: Platforms like Mailchimp that send our newsletters (they receive your email address if you are subscribed).
• Analytics Providers: Tools like Google Analytics that help us analyze Site traffic (data shared is often anonymized or pseudonymized).

3.2 Legal Requirements

We may disclose your personal information if required by law, such as in response to a valid court order, subpoena, or request from a government authority. We may also disclose information to protect our rights, property, or safety, or the rights, property, or safety of our users or others (e.g., investigating fraud).

3.3 Business Transfers

If we undergo a merger, acquisition, sale of assets, or other business transaction, your personal information may be transferred to the new owner or entity as part of the transaction. We will notify you via email or a prominent notice on our Site before your information is transferred and becomes subject to a different privacy policy.

4. Your Privacy Rights

Depending on your location (e.g., EEA, California), you may have the following rights regarding your personal information. To exercise these rights, please contact us using the details in Section 10.

4.1 Access & Correction

You have the right to request access to the personal information we hold about you (e.g., a copy of your order history or account details) and to correct any inaccurate or incomplete information (e.g., updating your shipping address).

4.2 Deletion (“Right to Be Forgotten”)

You may request that we delete your personal information, subject to certain exceptions (e.g., we may need to retain data to comply with tax laws or resolve disputes). We will confirm deletion once complete, where possible.

4.3 Data Portability

You have the right to receive your personal information in a structured, machine-readable format (e.g., a CSV file) and to transfer this data to another service provider, where technically feasible.

4.4 Withdrawal of Consent

If you provided consent for a specific use of your information (e.g., marketing emails), you may withdraw that consent at any time. For example, you can unsubscribe from newsletters by clicking the “unsubscribe” link in any promotional email.

4.5 Opt-Out of Marketing

Users in California (under CCPA) or the EEA (under GDPR) may opt out of the sale of their personal information (we do not sell data, but this right still applies to certain data sharing) or opt out of personalized marketing. Contact us to submit an opt-out request.

5. Cookie Policy

We use cookies (small text files stored on your device) and similar technologies (e.g., web beacons, pixel tags) to enhance your experience on our Site. Cookies help us:

• Remember your account login details (so you don’t have to sign in every time).
• Track items in your shopping cart.
• Analyze how users interact with our Site (to improve performance).
• Deliver personalized ads (where permitted).

5.1 Types of Cookies We Use

• Necessary Cookies: Essential for the Site to function (e.g., cookies that enable checkout). These cannot be disabled.
• Analytics Cookies: Used to collect data about Site usage (e.g., which pages are visited most). We use Google Analytics for this purpose—you can opt out by installing the Google Analytics Opt-Out Browser Add-on.
• Marketing Cookies: Used to deliver targeted ads (e.g., showing you CozyKnit Warmth ads on social media after you visit our Site).

5.2 Managing Cookies

You can control or delete cookies through your browser settings. Most browsers allow you to block third-party cookies, delete existing cookies, or receive a warning before a cookie is stored. Note that disabling necessary cookies may prevent certain features of our Site (e.g., checkout) from working properly.

6. Data Security

We take reasonable and industry-standard measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of sensitive data (e.g., payment details, passwords) using Secure Sockets Layer (SSL) technology.
• Restricted access to personal information (only authorized employees and service providers can access data, and only for permitted purposes).
• Regular security audits and updates to our Site and systems to address vulnerabilities.

However, no method of data transmission or storage is 100% secure. We cannot guarantee absolute security, but we will take all reasonable steps to mitigate risks.

7. Children’s Privacy

Our Site and Services are not intended for children under the age of 13 (or under 16 in the EEA, per GDPR). We do not knowingly collect personal information from children. If we discover that we have inadvertently collected data from a child without parental consent, we will delete that information immediately. Parents or guardians who believe their child has provided information to us may contact us to request deletion.

8. International Data Transfers

If you are located outside the United States, your personal information may be transferred to and processed in the United States (where our servers and service providers are based). The United States may have different data protection laws than your home country. To protect your information, we rely on:

• EU-U.S. Data Privacy Framework (DPF): For users in the EEA, we comply with the DPF to ensure your data is treated with the same level of protection as required by GDPR.
• Standard Contractual Clauses (SCCs): We use SCCs (pre-approved by the European Commission) when transferring data to third-party service providers outside the EEA.

By using our Site or Services, you consent to the transfer of your personal information to the United States as described above.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in laws, our business practices, or new features. When we update the policy, we will revise the “Last Updated” date at the top and post the new version on our Site. We may also notify you via email (if you have an account) or a pop-up notice on our Site for material changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Site or Services after the updated policy takes effect constitutes your acceptance of the changes.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

• Email: jlana55531@gmail.com

We will respond to your inquiry within 30 days (or within the time frame required by applicable law).

Would you like me to adjust this Privacy Policy—for example, adding region-specific clauses (e.g., CCPA amendments for California users), updating contact details, or modifying sections to align with your business model (e.g., excluding international shipping if you don’t offer it)?