Privacy Policy
What we collect, why we collect it, and how to get it deleted.
We ask for the least we can. We use it to get your blanket to you and to answer your emails. We do not sell it to anybody, ever.
Who is responsible
Coza is the data controller for the information described here. For anything on this page, write to questions@coza.com.
What we collect
- When you order — your name, delivery address, email address, phone number if you give one, and what you bought.
- When you pay — our payment provider handles your card. We never see or store the card number; we only learn whether the payment succeeded.
- When you make an account — your email address, a scrambled version of your password, and any addresses you save.
- When you browse — which pages you visited and roughly where in the world you are. This only happens if you accepted cookies.
- When you email us — whatever you write, so we can help you and remember the conversation.
Why we are allowed to hold it
- To do what you asked — we cannot deliver a blanket without an address.
- Because the law says so — sales and tax records have to be kept for a set number of years.
- Because you said yes — analytics and marketing emails only happen with your consent, and you can take it back at any time.
- To run the shop sensibly — spotting fraud and keeping the site working.
Who else sees it
Only the companies that help us complete your order:
- The payment provider that takes your payment securely.
- The courier that carries your parcel to your door.
- The hosting and email providers that keep the shop running.
- Our analytics provider, only if you accepted cookies.
Each of them may only use your data to do that job. We do not sell, rent or trade your information with anyone.
How long we keep it
- Order and invoice records: as long as tax law requires.
- Account details: until you ask us to close the account.
- Email conversations: up to three years, then deleted.
- Analytics: up to fourteen months.
Your rights
Under the GDPR you can ask us to show you what we hold, correct it, delete it, send it to you in a portable file, or stop using it for a particular purpose. You can also withdraw consent for analytics or marketing whenever you like.
Email questions@coza.com and we will act within one month, free of charge. If you are unhappy with how we handled it, you may complain to your national data protection authority.
Keeping it safe
The whole site runs over an encrypted connection. Passwords are stored scrambled and cannot be read by us. Access to customer records is limited to the people who need it to fulfil orders and answer questions.
Children
This shop is not aimed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us their details, tell us and we will remove them.
Changes to this policy
If we change anything meaningful, we will update the date at the top of this page. Orders already placed are always handled under the policy that applied when you bought.