Privacy policy

 

At cosina.shop, we respect your privacy and are committed to protecting the personal information of our customers, website visitors, and other individuals who interact with our online store.

This Privacy Policy explains how cosina.shop collects, uses, stores, discloses, protects, and otherwise processes personal information when you visit our website, create an account, place an order, communicate with us, subscribe to marketing communications, interact with our advertisements, or otherwise use our services.

This Privacy Policy is intended for customers and users in the United Kingdom and has been prepared with reference to applicable UK data protection and privacy requirements, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), and relevant amendments introduced by the Data (Use and Access) Act 2025, where applicable.

Our online store is operated using Shopify's e-commerce technology and may also use third-party service providers to support payment processing, order fulfilment, shipping, analytics, fraud prevention, marketing, customer support, and other business operations.

For privacy-related questions or requests, please contact:

cosina.shop
Email: info@cosina.shop
Website: cosina.shop
Market: United Kingdom

1. Who We Are

For the purposes of applicable UK data protection law, cosina.shop is responsible for determining how and why personal information collected through our store is processed, except where another organisation acts independently as a separate controller.

When this Privacy Policy refers to "cosina.shop", "we", "us", or "our", it refers to the business operating the cosina.shop online store.

Our primary privacy contact is:

info@cosina.shop

If you have questions about this Privacy Policy or the way we process your personal information, you may contact us using this email address.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information processed in connection with:

  • Visiting cosina.shop;

  • Browsing our products;

  • Creating or using a customer account;

  • Adding products to a shopping basket;

  • Placing an order;

  • Making a payment;

  • Requesting delivery;

  • Requesting a return or refund;

  • Communicating with customer service;

  • Subscribing to newsletters or marketing communications;

  • Participating in promotions where offered;

  • Providing feedback or reviews;

  • Interacting with our online advertisements;

  • Using cookies or similar technologies on our website; and

  • Otherwise interacting with our online services.

This Privacy Policy does not necessarily apply to third-party websites, platforms, applications, or services that may be linked from our website and that operate under their own privacy policies.

3. What Is Personal Information?

Personal information, also referred to as personal data, generally means information relating to an identified or identifiable individual.

This may include information that directly identifies you as well as information that can identify you when combined with other information.

Examples may include:

  • Name;

  • Email address;

  • Telephone number;

  • Billing address;

  • Delivery address;

  • Customer account information;

  • Order history;

  • IP address;

  • Device identifiers;

  • Online identifiers;

  • Payment transaction information; and

  • Communications between you and cosina.shop.

Information that has been effectively anonymised so that an individual can no longer reasonably be identified is generally not treated as personal information for the purposes of this Privacy Policy.

4. Personal Information We Collect

Depending on how you interact with cosina.shop, we may collect different categories of personal information.

Identity Information

This may include:

  • First name;

  • Last name;

  • Customer account name; and

  • Other identifying information that you voluntarily provide.

Contact Information

This may include:

  • Email address;

  • Telephone number;

  • Billing address;

  • Delivery address; and

  • Other contact information.

Order and Transaction Information

When you purchase products from cosina.shop, we may process information relating to your transaction, including:

  • Products purchased;

  • Product quantities;

  • Order number;

  • Order date;

  • Order value;

  • Currency;

  • Discounts;

  • Shipping method;

  • Delivery status;

  • Returns;

  • Refunds;

  • Exchanges; and

  • Transaction history.

Payment Information

Payments may be processed by third-party payment service providers.

Depending on the payment method selected, payment-related information may include:

  • Payment method;

  • Billing information;

  • Transaction identifiers;

  • Payment status;

  • Limited card-related information made available to us by the payment processor; and

  • Fraud-prevention information.

We do not generally need to directly store your complete payment card number or security code when payments are processed securely by an authorised payment provider.

Account Information

If customer account functionality is available, we may collect:

  • Login information;

  • Account preferences;

  • Saved addresses;

  • Order history;

  • Account activity; and

  • Other information associated with your account.

Customer Service Information

When you contact us, we may collect:

  • Your name;

  • Email address;

  • Order number;

  • Details of your enquiry;

  • Complaint information;

  • Return or refund information;

  • Photographs or videos provided to demonstrate a product issue; and

  • Correspondence between you and our customer service team.

Technical and Device Information

When you access cosina.shop, certain technical information may be collected automatically.

This may include:

  • Internet Protocol address;

  • Browser type;

  • Browser version;

  • Device type;

  • Operating system;

  • Device identifiers;

  • Language settings;

  • Approximate geographic region;

  • Referral source;

  • Pages viewed;

  • Session duration;

  • Interaction information;

  • Website navigation behaviour; and

  • Diagnostic or error information.

Marketing Information

Where applicable, we may collect information relating to:

  • Marketing preferences;

  • Newsletter subscriptions;

  • Advertising interactions;

  • Email engagement;

  • Promotional participation;

  • Consent records; and

  • Marketing opt-out requests.

Cookie and Tracking Information

Where permitted, we and our technology providers may collect information through:

  • Cookies;

  • Pixels;

  • Tags;

  • Scripts;

  • Local storage;

  • Web beacons;

  • Device identifiers;

  • Similar storage technologies; and

  • Other permitted online measurement technologies.

These technologies are explained in greater detail below.

5. How We Collect Personal Information

We may collect personal information from several sources.

Information You Provide Directly

You may provide information directly when you:

  • Place an order;

  • Create an account;

  • Complete checkout;

  • Contact customer service;

  • Request a return;

  • Submit a refund request;

  • Subscribe to marketing;

  • Complete a form;

  • Provide feedback; or

  • Otherwise communicate with us.

Information Collected Automatically

Certain information may be collected automatically when you use our website through cookies, server logs, device technologies, and similar mechanisms.

Information From Service Providers

We may receive personal information from organisations that help us operate our business, such as:

  • Shopify;

  • Payment providers;

  • Shipping carriers;

  • Fulfilment providers;

  • Fraud prevention providers;

  • Analytics services;

  • Advertising platforms;

  • Customer service systems; and

  • Other technology providers.

Information From Public or Permitted Sources

Where lawful and relevant, we may receive information from publicly available sources or other lawful third-party sources.

6. Why We Use Your Personal Information

We only process personal information where there is an appropriate purpose and legal basis for doing so.

We may use personal information for the purposes described below.

7. Processing and Fulfilling Orders

We use customer information to:

  • Accept orders;

  • Verify orders;

  • Process payments;

  • Confirm purchases;

  • Prepare products for shipment;

  • Arrange delivery;

  • Provide shipment updates;

  • Manage returns;

  • Issue refunds;

  • Handle exchanges; and

  • Maintain transaction records.

This processing is generally necessary to perform the contract between you and cosina.shop.

Without certain information, such as your name, delivery address, and payment-related information, we may be unable to complete your order.

8. Providing Customer Support

We may process your information to:

  • Respond to enquiries;

  • Investigate complaints;

  • Resolve delivery issues;

  • Handle returns;

  • Process refund requests;

  • Investigate defective products;

  • Answer product questions; and

  • Provide general assistance.

Depending on the circumstances, this processing may be necessary to perform our contract with you, comply with legal obligations, or pursue our legitimate interests in providing effective customer service.

9. Operating and Improving Our Website

We may process information to operate, maintain, secure, and improve cosina.shop.

This may include:

  • Diagnosing technical problems;

  • Improving navigation;

  • Monitoring website performance;

  • Understanding customer interactions;

  • Preventing website misuse;

  • Maintaining availability;

  • Testing new functionality; and

  • Improving user experience.

Where appropriate, this processing may be based on our legitimate interests in operating and improving our online business.

10. Fraud Prevention and Security

We may process personal information where reasonably necessary to:

  • Detect fraudulent transactions;

  • Prevent payment fraud;

  • Prevent identity misuse;

  • Protect customer accounts;

  • Investigate suspicious activity;

  • Protect our systems;

  • Prevent malicious website activity;

  • Enforce our contractual rights; and

  • Protect customers and our business from unlawful conduct.

This processing may be based on legitimate interests, compliance with legal obligations, or another lawful basis depending on the circumstances.

11. Legal and Regulatory Compliance

We may process personal information when necessary to comply with applicable laws and legal obligations.

This can include:

  • Tax requirements;

  • Accounting requirements;

  • Consumer protection obligations;

  • Fraud prevention requirements;

  • Court orders;

  • Regulatory requests;

  • Law enforcement requests where legally valid;

  • Recordkeeping requirements; and

  • Other legal obligations.

12. Marketing Communications

Where legally permitted, we may use contact information to communicate with customers about:

  • Products;

  • Store updates;

  • Promotions;

  • Special offers;

  • New products;

  • Relevant commercial communications; and

  • Other cosina.shop news.

We will use consent where consent is required by applicable law.

In certain circumstances, applicable UK electronic marketing rules may permit us to send marketing relating to similar products to existing customers where legal requirements are satisfied and an appropriate opt-out is provided.

You may stop receiving electronic marketing communications at any time.

You may:

  • Use the unsubscribe option provided in a marketing message; or

  • Email info@cosina.shop.

Stopping marketing communications does not prevent us from sending necessary transactional or service-related communications regarding your orders or account.

13. Our Lawful Bases for Processing

Under UK data protection law, personal information must generally be processed under an appropriate lawful basis.

Depending on the circumstances, we may rely on:

Performance of a Contract

We may process information because it is necessary to enter into or perform a contract with you.

Examples include:

  • Processing an order;

  • Taking payment;

  • Delivering products;

  • Handling contractual returns; and

  • Providing order-related customer support.

Legal Obligation

We may process information where necessary to comply with a legal obligation.

Examples may include:

  • Financial recordkeeping;

  • Tax requirements;

  • Legal claims;

  • Regulatory requirements; and

  • Consumer protection obligations.

Legitimate Interests

We may process information where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

Legitimate interests may include:

  • Operating our online store;

  • Protecting against fraud;

  • Improving services;

  • Maintaining website security;

  • Understanding business performance;

  • Providing customer support; and

  • Protecting our legal rights.

Where required, we consider the nature of the information, reasonable customer expectations, necessity of the processing, and potential impact on individuals.

Consent

We may rely on consent when required or appropriate.

This may include certain:

  • Marketing activities;

  • Advertising activities;

  • Analytics technologies;

  • Cookies; and

  • Other optional tracking technologies.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not make processing that occurred lawfully before withdrawal unlawful.

14. Shopify

Our online store is operated using Shopify, an e-commerce platform that provides technology used to display products, manage orders, process store activity, support checkout, and operate other online commerce functions.

In connection with operating cosina.shop, personal information may be processed through Shopify's systems.

Information processed through Shopify may include:

  • Customer details;

  • Order information;

  • Technical information;

  • Checkout information;

  • Device information; and

  • Other information necessary to provide Shopify's services.

Shopify may also process certain information under its own legal responsibilities and privacy terms.

Where appropriate, customers should review privacy information made available by Shopify regarding its own processing activities.

15. Payment Providers

We may use third-party payment providers to process payments securely.

When you make a payment, relevant information may be transmitted directly to the selected payment provider.

Payment processors may process:

  • Payment credentials;

  • Billing information;

  • Device information;

  • Fraud-prevention information;

  • Transaction information; and

  • Authentication information.

Payment providers may have their own privacy obligations and privacy policies.

We only seek to share payment-related information that is reasonably necessary to process and protect transactions.

16. Shipping and Fulfilment Providers

To fulfil your order, we may share appropriate personal information with:

  • Delivery companies;

  • Couriers;

  • Postal services;

  • Warehouses;

  • Fulfilment partners;

  • Logistics providers; and

  • Other organisations involved in delivering your order.

Information shared may include:

  • Name;

  • Delivery address;

  • Telephone number;

  • Email address;

  • Order information; and

  • Delivery instructions.

We only seek to share information reasonably necessary to complete fulfilment and delivery.

17. Other Service Providers

We may work with third-party providers that assist us with:

  • E-commerce hosting;

  • Information technology;

  • Website maintenance;

  • Payment processing;

  • Fraud detection;

  • Security;

  • Customer service;

  • Email delivery;

  • Analytics;

  • Marketing;

  • Advertising;

  • Shipping;

  • Fulfilment;

  • Accounting;

  • Professional advice; and

  • Other legitimate business operations.

These providers may receive personal information where necessary to perform their services.

Where required, we seek to use appropriate contractual or other safeguards relating to personal information processed on our behalf.

18. When We May Disclose Personal Information

We may disclose personal information where reasonably necessary in the following circumstances.

Service Providers

We may share information with organisations providing services on our behalf.

Business Transactions

If cosina.shop undergoes a merger, acquisition, restructuring, sale, financing, transfer, or similar business transaction, relevant information may be disclosed to appropriate parties subject to applicable legal safeguards.

Legal Requirements

We may disclose information where necessary to:

  • Comply with applicable law;

  • Respond to a valid legal process;

  • Respond to lawful requests from regulators;

  • Cooperate with law enforcement where legally required;

  • Protect our legal rights;

  • Prevent fraud; or

  • Protect the safety and rights of customers and others.

With Your Direction or Consent

We may share personal information where you request, authorise, or consent to the disclosure.

19. We Do Not Sell Personal Information in the Ordinary Meaning of the Term

cosina.shop does not intend to operate a business model based on selling customers' personal information to unrelated third parties for money.

However, certain advertising, analytics, or online technologies may involve information being shared with third-party platforms.

Where such processing requires consent or another specific legal basis under applicable UK law, we intend to apply the appropriate legal requirements.

20. Cookies and Similar Technologies

cosina.shop may use cookies and similar storage or access technologies to provide website functionality and understand how our store is used.

A cookie is a small piece of information that may be stored on your device when you visit a website.

Cookies and similar technologies may be used for:

  • Maintaining shopping baskets;

  • Remembering preferences;

  • Maintaining login sessions;

  • Website security;

  • Fraud prevention;

  • Checkout functionality;

  • Website performance;

  • Analytics;

  • Advertising;

  • Measuring marketing effectiveness; and

  • Improving user experience.

21. Strictly Necessary Technologies

Certain technologies may be necessary for the operation of our online store.

For example, they may be required to:

  • Maintain a shopping cart;

  • Enable checkout;

  • Authenticate customers;

  • Protect account security;

  • Prevent fraud;

  • Maintain website stability; or

  • Provide services specifically requested by the user.

Where applicable law permits these technologies to be used without consent, we may use them on that basis.

22. Analytics and Optional Technologies

We may use analytics technologies to understand matters such as:

  • Website traffic;

  • Popular products;

  • Pages visited;

  • Customer navigation;

  • Device characteristics;

  • Website performance;

  • Conversion performance; and

  • General usage patterns.

Where consent is legally required for particular analytics or tracking technologies, those technologies should only be used after appropriate consent has been obtained.

23. Advertising Technologies

Where used, advertising technologies may help us:

  • Measure advertisements;

  • Understand advertising performance;

  • Display relevant promotions;

  • Measure conversions;

  • Understand customer journeys; and

  • Manage online marketing campaigns.

Advertising and tracking technologies may involve third-party providers.

Where legally required, non-essential advertising technologies are subject to appropriate consent choices.

24. Managing Cookie Preferences

Where cookie controls are made available through cosina.shop, you may use them to manage optional technologies.

You may also be able to control cookies through your browser or device settings.

Blocking certain necessary cookies may affect website functionality, including the ability to:

  • Add items to a cart;

  • Remain signed in;

  • Complete checkout; or

  • Use certain website features.

Your choices regarding optional cookies should not prevent access to basic website functionality unless a particular technology is technically necessary for that functionality.

25. International Data Transfers

Because online commerce often relies on international technology providers, personal information may in some circumstances be processed or stored outside the United Kingdom.

For example, providers involved in:

  • Shopify services;

  • Cloud infrastructure;

  • Payment processing;

  • Customer support;

  • Analytics;

  • Marketing;

  • Fulfilment; or

  • Other technology services

may operate internationally.

Where personal information is transferred outside the United Kingdom, we seek to rely on an appropriate transfer mechanism where required by UK data protection law.

Depending on the destination and circumstances, this may include:

  • UK adequacy regulations;

  • Appropriate contractual safeguards;

  • International Data Transfer Agreements;

  • UK-approved transfer mechanisms;

  • Applicable transfer addenda; or

  • Other legally recognised safeguards.

Where required, relevant transfer risks may also be assessed.

26. How Long We Keep Personal Information

We do not intend to retain personal information indefinitely without a legitimate reason.

Retention periods depend on factors including:

  • The nature of the information;

  • Why it was collected;

  • Contractual requirements;

  • Legal obligations;

  • Accounting requirements;

  • Tax requirements;

  • Consumer disputes;

  • Fraud-prevention requirements;

  • Warranty matters;

  • Potential legal claims; and

  • Business recordkeeping needs.

Order and transaction records may be retained for periods necessary to meet legal, accounting, tax, fraud prevention, and dispute-resolution obligations.

Customer communications may be retained for as long as reasonably necessary to resolve enquiries, document customer service matters, or protect legitimate legal interests.

Marketing information may be retained until consent is withdrawn, an objection is made, the information is no longer needed, or another applicable retention criterion is met.

Where information is no longer reasonably required, it may be deleted, anonymised, or otherwise securely disposed of.

27. Data Security

We take reasonable organisational and technical measures intended to protect personal information against risks such as:

  • Unauthorised access;

  • Unauthorised disclosure;

  • Accidental loss;

  • Improper alteration;

  • Destruction;

  • Misuse; and

  • Unlawful processing.

Measures may include, as appropriate:

  • Access controls;

  • Authentication mechanisms;

  • Secure e-commerce technology;

  • Encrypted connections;

  • Restricted administrative access;

  • Payment security measures;

  • Security monitoring;

  • Fraud detection; and

  • Appropriate service-provider controls.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Customers should also take reasonable steps to protect their accounts, devices, passwords, and email credentials.

28. Personal Data Breaches

If we become aware of a personal data breach, we will assess the circumstances and take appropriate steps.

Depending on the nature and severity of the breach, these steps may include:

  • Containing the incident;

  • Investigating the cause;

  • Assessing potential risks;

  • Taking corrective measures;

  • Notifying relevant service providers;

  • Notifying the UK Information Commissioner's Office where legally required; and

  • Notifying affected individuals where legally required.

29. Your UK Data Protection Rights

Depending on the circumstances, UK data protection law may provide you with several rights concerning your personal information.

These rights are not necessarily absolute and may be subject to legal limitations or exceptions.

30. Right to Be Informed

You have the right to receive information about how your personal information is collected and used.

This Privacy Policy is intended to help provide that information.

Where required, additional privacy information may also be provided at relevant points during your interaction with our store.

31. Right of Access

You may have the right to request confirmation of whether we process your personal information and to request access to applicable information.

This is sometimes referred to as a subject access request.

You may submit a request by emailing:

info@cosina.shop

We may need to verify your identity before providing personal information.

32. Right to Rectification

If personal information that we hold about you is inaccurate or incomplete, you may ask us to correct or complete it where applicable.

Requests may be sent to:

info@cosina.shop

33. Right to Erasure

In certain circumstances, you may request deletion of your personal information.

This right is sometimes called the right to be forgotten.

The right to erasure is not absolute.

For example, we may need to retain certain information where processing is necessary for:

  • Legal obligations;

  • Financial recordkeeping;

  • Establishing legal claims;

  • Exercising legal rights;

  • Defending legal claims; or

  • Other lawful purposes.

34. Right to Restrict Processing

In certain circumstances, you may request that we restrict the way we process your personal information.

Where processing is validly restricted, information may be retained while certain other uses are temporarily limited.

35. Right to Data Portability

Where the legal requirements are satisfied, you may have the right to receive certain personal information in a structured, commonly used, and machine-readable format.

You may also have the right in relevant circumstances to ask for qualifying information to be transmitted to another controller where technically feasible.

36. Right to Object

In certain circumstances, you may object to processing based on legitimate interests or other applicable grounds.

We will consider the objection in accordance with applicable law.

You also have the right to object to the use of your personal information for direct marketing.

If you object to direct marketing, we will stop using your personal information for that purpose as required by law.

37. Withdrawing Consent

Where we rely on consent to process personal information, you may withdraw that consent.

You may contact:

info@cosina.shop

Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

38. Automated Decision-Making and Profiling

Technology used in online commerce may involve automated processing.

For example, automated systems may assist with:

  • Fraud risk assessment;

  • Payment security;

  • Spam prevention;

  • Advertising;

  • Product recommendations; or

  • Website personalisation.

We do not intend to make solely automated decisions that produce legal or similarly significant effects on customers unless the processing is permitted under applicable law and appropriate safeguards are provided.

Where applicable law gives you rights concerning automated decision-making, those rights will be respected.

39. How to Exercise Your Rights

To make a privacy request, contact:

info@cosina.shop

Please clearly describe the right you wish to exercise and provide sufficient information for us to identify the relevant records.

For security reasons, we may request reasonable information to verify your identity.

This helps us prevent personal information from being disclosed to an unauthorised person.

Where permitted by law, we may also ask for clarification if a request is unclear or if additional information is reasonably needed to locate the requested information.

We will respond within the applicable legal timeframe.

40. Identity Verification

Protecting customer information is important.

Before fulfilling certain privacy requests, particularly access or deletion requests, we may need to confirm that the requester is the person to whom the information relates or is properly authorised to act for that person.

Verification methods will depend on the nature and sensitivity of the information requested.

We will not intentionally request more verification information than is reasonably necessary.

41. Requests Made by Authorised Representatives

Where permitted by law, an authorised representative may make certain requests on behalf of another individual.

We may request reasonable evidence demonstrating that the representative has authority to act on the individual's behalf.

We may also need to verify the identity of the individual concerned.

42. Complaints About Our Handling of Personal Information

If you have concerns about how cosina.shop processes your personal information, we encourage you to contact us first.

Email:

info@cosina.shop

Please explain your concern clearly so that we can investigate it.

We will seek to address legitimate privacy complaints appropriately and in accordance with applicable UK data protection requirements.

43. Right to Complain to the Information Commissioner's Office

Individuals in the United Kingdom may have the right to make a complaint to the Information Commissioner's Office (ICO) if they believe their personal information has been processed in breach of applicable data protection law.

Making a complaint to us first does not remove your right to contact the ICO.

We encourage customers to contact info@cosina.shop so that we have an opportunity to investigate and address the concern.

44. Children

cosina.shop is intended as a general online retail service and is not specifically designed to collect personal information from young children.

We do not knowingly seek to collect children's personal information for unnecessary purposes.

Where we become aware that personal information relating to a child has been collected in circumstances requiring additional protections, we will take appropriate steps in accordance with applicable law.

Parents or guardians who believe a child has provided personal information inappropriately may contact:

info@cosina.shop

45. Third-Party Links

cosina.shop may contain links to websites or services operated by third parties.

For example, links may direct users to:

  • Payment providers;

  • Social networks;

  • Delivery providers;

  • Product information resources; or

  • Other external services.

Third-party websites operate independently from cosina.shop and may have their own privacy practices.

We recommend reviewing the privacy policies of third-party services before providing personal information to them.

We are not responsible for a third party's independent privacy practices except to the extent applicable law provides otherwise.

46. Social Media and External Platforms

If you interact with cosina.shop through a social media service or external platform, the relevant platform may process information independently according to its own privacy terms.

Depending on your account and privacy settings, we may receive information relating to your interactions with our content.

Customers should review the privacy controls offered by the relevant social media platform.

47. Product Reviews and User Content

If cosina.shop provides functionality allowing customers to submit reviews, comments, photographs, or other public content, information submitted for publication may become visible to other website visitors.

You should avoid including unnecessary personal or sensitive information in content intended for public display.

Where appropriate, we may moderate or remove content consistent with our legitimate interests, website rules, and applicable law.

48. Sensitive Personal Information

We do not ordinarily require customers to provide special category personal information in order to purchase normal retail products from cosina.shop.

Please avoid sending unnecessary sensitive information through ordinary customer service communications.

If special category information is processed, we will seek to ensure that an appropriate legal basis and additional condition apply where required.

49. Criminal Offence Information

We do not ordinarily seek to process criminal offence information about customers.

However, limited information relating to suspected fraud or unlawful conduct may be processed where legally permitted and reasonably necessary to protect customers, prevent crime, defend legal rights, or meet applicable legal requirements.

50. Direct Marketing

We seek to conduct direct electronic marketing in accordance with applicable UK requirements.

Where consent is required, we will seek appropriate consent before sending relevant marketing.

Where another lawful electronic marketing mechanism applies, such as applicable rules concerning certain communications to existing customers, we intend to provide a clear way to object or unsubscribe.

You can opt out of marketing at any time by:

  • Selecting the unsubscribe option in the communication; or

  • Emailing info@cosina.shop.

Marketing preferences may take a short period to update across relevant systems.

Even after opting out of marketing, you may still receive non-marketing messages such as:

  • Order confirmations;

  • Payment confirmations;

  • Shipping updates;

  • Customer service responses;

  • Return information;

  • Refund confirmations;

  • Security communications; and

  • Important service notices.

51. Marketing Preference Records

If you unsubscribe from marketing, we may retain limited information indicating that you opted out.

This allows us to respect your preference and avoid accidentally adding you back to a marketing list.

Such suppression records may be retained where reasonably necessary to comply with legal obligations and honour your marketing choices.

52. Fraud Detection

Our store, payment providers, Shopify, or other relevant providers may use technical systems designed to identify suspicious transactions.

These systems may assess information such as:

  • Transaction patterns;

  • IP address;

  • Device information;

  • Payment details;

  • Delivery information;

  • Account activity; and

  • Previous transaction information.

This processing helps protect customers, payment networks, and our business against fraudulent activity.

53. Analytics

Where legally permitted, analytics services may help us understand how cosina.shop performs.

Analytics may help us evaluate:

  • Website visits;

  • Product page activity;

  • Navigation patterns;

  • Shopping basket activity;

  • Checkout behaviour;

  • Website errors;

  • Traffic sources;

  • Device categories; and

  • General customer engagement.

Where analytics technologies require consent under applicable UK law, we intend to use them subject to appropriate consent mechanisms.

54. Advertising and Measurement

Where cosina.shop conducts online advertising, advertising providers may help measure campaign effectiveness.

Depending on customer consent choices and applicable law, measurement activities may involve information such as:

  • Website interactions;

  • Referral information;

  • Device identifiers;

  • Cookie identifiers;

  • Advertising identifiers; and

  • Conversion events.

We aim to use advertising technologies consistently with applicable consent and transparency requirements.

55. Data Minimisation

We seek to collect and process personal information that is reasonably relevant to the purposes for which it is used.

We do not intentionally request substantially more personal information than is reasonably necessary for normal retail operations.

Where information is no longer required for an appropriate purpose, we may delete or anonymise it in accordance with our retention practices.

56. Accuracy

We take reasonable steps to keep personal information accurate where appropriate.

Customers can assist by providing accurate:

  • Names;

  • Email addresses;

  • Telephone numbers;

  • Billing details; and

  • Delivery addresses.

If your information changes, please update your account where functionality is available or contact:

info@cosina.shop

57. Changes to Our Business

If the ownership or structure of cosina.shop changes, personal information may form part of a legitimate business transaction.

Examples may include:

  • Sale of a business;

  • Acquisition;

  • Merger;

  • Corporate restructuring;

  • Financing transaction; or

  • Transfer of business assets.

Where applicable, we will seek to protect personal information through appropriate safeguards and comply with relevant transparency requirements.

58. Legal Claims

We may retain and process personal information where reasonably necessary to:

  • Establish legal rights;

  • Exercise legal rights;

  • Defend legal claims;

  • Resolve disputes;

  • Enforce agreements; or

  • Respond to legal proceedings.

This may result in relevant records being retained beyond ordinary operational retention periods where legally justified.

59. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Reasons for changes may include:

  • Changes to our business;

  • Changes to Shopify functionality;

  • New service providers;

  • Changes to our products;

  • New website functions;

  • Changes to data processing activities;

  • Changes to applicable law;

  • Regulatory guidance;

  • Security improvements; or

  • Other operational developments.

The updated version will be published on cosina.shop with an updated revision date where appropriate.

Where a change materially affects the way personal information is processed and additional notification or consent is legally required, we will take appropriate steps.

60. Contact Us

For any privacy-related question, complaint, request, or concern, please contact:

cosina.shop
Privacy Contact: info@cosina.shop
Website: cosina.shop
Market: United Kingdom

You may use this email address for matters including:

  • Subject access requests;

  • Correction requests;

  • Erasure requests;

  • Restriction requests;

  • Data portability requests;

  • Objections;

  • Marketing opt-outs;

  • Consent withdrawals;

  • Cookie-related enquiries;

  • Privacy complaints; and

  • General data protection questions.

Please provide enough information for us to understand and respond to your request.

61. Final Privacy Statement

At cosina.shop, we recognise that customers expect their personal information to be treated responsibly.

Our objective is to collect only information reasonably necessary for legitimate business purposes, explain how that information is used, apply appropriate security safeguards, respect applicable privacy choices, and provide customers with mechanisms for exercising their legal rights.

By operating our store in this manner, we aim to provide a transparent and trustworthy online shopping experience for customers in the United Kingdom.

Nothing in this Privacy Policy is intended to exclude, restrict, or reduce any data protection right that cannot lawfully be excluded under applicable United Kingdom law.

For all privacy-related enquiries, please contact:

cosina.shop
Email: info@cosina.shop

This Privacy Policy provides general information about the privacy practices of cosina.shop and is intended to support transparent operation of the online store. It does not constitute formal legal advice for any specific business or individual situation.