CozyPillow Haven Privacy Policy

Last Updated: October 20, 2025

1. Introduction

CozyPillow Haven ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website (www.cozypillowhaven.com), purchase our products, or interact with our services. By accessing or using our platform, you acknowledge that you have read, understood, and agree to the terms of this policy.

This policy applies to all users, including guests browsing our site, registered accounts, and customers who place orders. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union and the California Consumer Privacy Act (CCPA) for users in California.

2. Information We Collect

We collect two categories of information: personal information (data that identifies you) and non-personal information (anonymous data that cannot identify you).

2.1 Personal Information

We may collect personal information directly from you or through your interactions with our platform:

• Identity & Contact Data: Full name, email address, phone number, shipping/billing address, and account username/password.
• Transaction Data: Order history, purchase amount, payment method details (e.g., last 4 digits of credit cards, PayPal ID), and order tracking information.
• Communication Data: Records of your messages with our customer support (via email, chat, or phone) and preferences for marketing communications.
• Sleep Preference Data: Information you provide when seeking product recommendations (e.g., "side sleeper," "hot sleeper") or participating in surveys.

2.2 Non-Personal Information

We automatically collect non-identifiable data to improve our services:

• Technical Data: IP address, browser type, device model, operating system, and pages visited on our site.
• Usage Data: Time spent on pages, product views, search queries, and click-through rates.
• Aggregated Data: Anonymous trends (e.g., "60% of users prefer gel-infused pillows") that do not link to individual identities.

3. How We Use Your Information

We use your data only for legitimate business purposes aligned with your expectations, including:

3.1 Fulfill Your Requests

• Process and deliver your orders (e.g., share shipping address with logistics partners).
• Manage your account (e.g., update order status, reset passwords).
• Provide customer support (e.g., resolve inquiries about pillow care or returns).

3.2 Improve Our Products & Services

• Analyze usage patterns to optimize website navigation and product offerings.
• Test new pillow designs or features based on sleep preference data.
• Address technical issues (e.g., using IP addresses to resolve site downtime).

3.3 Communicate With You

• Send order updates (e.g., "Your pillow has shipped") and service notifications.
• Share marketing content (e.g., new product launches, discount offers) only if you opt in. You may unsubscribe at any time via the "Unsubscribe" link in emails.

3.4 Ensure Security & Compliance

• Detect and prevent fraud (e.g., verifying payment information).
• Comply with legal obligations (e.g., responding to regulatory inquiries).

4. Data Sharing & Disclosure

We never sell your personal information to third parties for commercial purposes. We only share data in the following limited circumstances:

4.1 Trusted Service Providers

We partner with vendors who assist in our operations, and they only access data necessary to perform their services:

• Payment Processors: Stripe, PayPal, or credit card issuers (to process payments securely).
• Logistics Partners: FedEx, UPS, or local couriers (to deliver orders).
• Analytics Tools: Google Analytics (to track website usage; data is anonymized per their policies).
• Customer Support Platforms: Zendesk (to manage your inquiries).

All service providers are bound by confidentiality agreements and must comply with data protection laws.​

4.2 Legal Requirements

We may disclose data if required by law (e.g., court order, subpoena) or to protect our rights (e.g., investigating fraudulent activity).

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity (we will notify you via email or website notice).

5. Data Security

We implement industry-standard measures to protect your data from unauthorized access, loss, or misuse:

• Encryption: Personal and payment data is encrypted using SSL/TLS technology during transmission.
• Access Controls: Only authorized staff (e.g., customer support, order processing teams) can access your data.
• Security Audits: We conduct regular checks of our systems to identify and address vulnerabilities.
• Data Minimization: We only store data necessary for the purposes outlined in this policy (e.g., we delete payment details after order completion).

While we strive for maximum security, no online platform is 100% secure. You are responsible for protecting your account (e.g., using strong passwords, not sharing login details).

6. Your Data Rights

Depending on your location, you have the following rights regarding your personal information:

6.1 Core Rights (Applicable Globally)

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask to update inaccurate or incomplete data (e.g., a wrong shipping address).
• Deletion: Request erasure of your data (subject to legal exceptions, e.g., retaining order records for tax purposes).
• Withdraw Consent: Opt out of marketing communications or data usage for non-essential purposes.

6.2 Additional Rights (GDPR & CCPA)

• Data Portability: Request your data in a machine-readable format (e.g., CSV file) to transfer to another service.
• Opt-Out of Sale/Sharing: For California users, prevent sharing of your data with third parties (we do not sell data, but you may still exercise this right).
• Non-Discrimination: We will not penalize you for exercising your privacy rights (e.g., denying discounts).

To exercise these rights, contact us at kateshabell468@gmail.com with your full name, email address, and specific request. We will respond within 15–30 days (per regulatory requirements).

7. Cookies & Tracking Technologies

We use cookies (small text files stored on your device) to enhance your experience:

• Necessary Cookies: Required for site functionality (e.g., remembering your shopping cart). These cannot be disabled.
• Analytics Cookies: Track usage to improve our site (e.g., which pillows are most viewed).
• Marketing Cookies: Deliver personalized offers (e.g., gel-infused pillow ads if you searched for "cooling pillows").

You can manage cookie preferences via your browser settings, but disabling non-necessary cookies may limit site features. For more details, see our separate Cookie Policy.

8. Data Retention

We retain your personal information only as long as needed:

• Account Data: Until you delete your account (plus 1 year for record-keeping).
• Transaction Data: 7 years (to comply with tax and consumer protection laws).
• Marketing Data: Until you unsubscribe or request deletion.

After retention periods expire, we securely delete or anonymize your data.

9. Minors’ Privacy

Our services are intended for users aged 18+. We do not knowingly collect personal information from minors under 13. If we discover we have such data, we will delete it immediately. Parents/guardians may contact us to request removal of their child’s data.

10. International Data Transfers

If you are outside the United States, your data may be transferred to our servers in the U.S. or to service providers in other countries. We ensure these transfers comply with data protection laws:

• For EU users: We use GDPR-approved safeguards (e.g., Standard Contractual Clauses).
• For California users: We adhere to CCPA’s cross-border data transfer rules.

11. Policy Updates

We may update this Privacy Policy to reflect legal changes or business updates. When we do, we will:

• Post the new policy on our website with a revised "Last Updated" date.
• Send email notifications to registered users for material changes.

Your continued use of our platform after updates means you accept the revised policy.

12. Contact Us

If you have questions, complaints, or requests regarding this Privacy Policy, contact our Data Protection Officer:

• Email: kateshabell468@gmail.com

You may also file a complaint with your local data protection authority (e.g., ICO in the UK, CCPA in California) if you believe we have violated your privacy rights.