Privacy

1. Controller

Cozy Cott is the controller. Contact: info@cozycott.com.

This notice is written for visitors and buyers in the EEA. We do not sell personal data.

2. What we process and why

Orders: name, address, email, phone, payment confirmation. Legal basis: contract and legal duties (accounts, warranty).

Support and helper chat: the content of your message. Legal basis: legitimate interest in answering questions, or consent if you choose to chat.

Newsletter: email address, only with consent. You can unsubscribe at any time.

Technical data: IP address, device and browser data, for security and to run the site. Necessary cookies only, without tracking.

Marketing cookies, pixels or ad profiles only after consent. Until that is switched on, we do not use them.

Room photos (See it in your room): if you upload a photo to see how a bed could look in your room. Legal basis: consent. We use the photo only to make that image.

3. Who we share with

Hosting of this new storefront: Vercel. Later: Shopify for cart, checkout, payments and orders.

Carrier: GLS. Payment providers via checkout. Accountants and IT suppliers where needed.

Helper chat stays on our systems. We do not send conversations to a public AI model for training.

Room images: the photo and the result are stored on Vercel Blob. An image model (via our host) receives the room photo and a product photo to make one visualisation. We do not use your photo to train AI models.

Transfers outside the EEA only with a valid safeguard, such as the European Commission’s standard contractual clauses.

4. Retention

Orders and invoices: seven years (tax law).

Support: up to two years after closing, unless a dispute lasts longer.

Chats: up to 90 days, then deleted or anonymised, unless needed for a complaint.

Room photos and generated images: up to 48 hours, then we delete them.

Newsletter: until you unsubscribe.

5. Your rights

You have rights of access, rectification, erasure, restriction, portability and objection, as far as the GDPR grants them.

Ask via info@cozycott.com. We may verify your identity.

Complaint: the Dutch AP (autoriteitpersoonsgegevens.nl), or your local authority.

This website is for adults buying for a child. We do not ask children for data.