We gather various types of Personal Information from our users, as detailed below. This information is used in connection with our services including to contact you, to allow you set up and manage a user account, to fulfill your order, to personalize your experience, and to analyze how you use our Services. Your Personal Information may be shared with third parties, but only in the capacity described below.
PERSONAL INFORMATION WE COLLECT
The following section details the categories of Personal Information we have collected over the last twelve (12) months.
Information You Provide to Us
Cozy Bliss retains personal information that you share through the following types of interactions:
Information Collected Automatically or From Others
Information from Other Sources. We may obtain information about you from other sources, including through third party services and organizations, to supplement information provided by you. For example, if you access our Services through a third-party application, such as a social networking site, we may collect information about you from that third-party application that you have made public via your privacy settings. Information we collect through these services may include your name, your user identification number, your user name, location, gender, birth date, email, profile picture, and your contacts stored in that service. This supplemental information allows us to verify information that you have provided to us and to enhance our ability to provide you with information about our business, products, and Services.
HOW WE USE YOUR INFORMATION
We acquire, hold, use and process Personal Information to operate, improve, understand and personalize our Sites and our products. For example, we use Personal Information to:
- Fulfill requests orders placed through the site or offline, including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations.
- Screen our orders for potential fraud or risk.
- Communicate with you directly about an order or inquiry you have made.
- Allow you to register for events.
- Generally manage individual information and accounts.
- Personalize your experience on Cozy Bliss’s website.
- Market Cozy Bliss’s products and services online, by phone, postal mail, or email. Personally identifiable information you provide to us, along with order information, may be combined with other personally identifiable information (such as demographic information and past purchase history) available from our records and other sources. This information will be used to make our future marketing efforts more efficient. This information may also be shared with our third party service providers that assist us with our marketing efforts and with other marketers whose products or services we feel may be of interest to you. You may contact firstname.lastname@example.org. at any time to opt out of the use of your Personal Information for marketing purposes or to ask that we do not share your name and address with other marketers. Conduct surveys to determine satisfaction with our products and effectiveness of our services, various types of communications, advertising campaigns, and/or promotional activities.
- Create anonymous and aggregated information repositories for analytics, including the measurement of visitors’ interest in and use of various portions or features of the Site. We may share this information within Cozy Bliss and with Third Parties for our or their purposes in an anonymized or aggregated form that is designed to prevent anyone from identifying you.
- Serve other internal purposes.
Categories of Third Parties with Whom We Share Information
- Payment processors
- Fraud prevention service providers
- Ad networks
- Marketing service providers
- Analytics service providers
- Staff augmentation and contract personnel
- Hosting service providers
- Co-location service providers
- Communications service providers
We also share Personal Data when necessary to complete a transaction initiated or authorized by you or provide you with a product or service you have requested. In addition to those set forth above, these parties also include:
- Fulfillment partners
- Third party business partners who you access through the Site
- Other parties authorized by you
We also share the information with third parties when you have given us consent to do so (as indicated at the point such information is collected).
We also share Personal Data when we believe it is necessary to:
- Comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies
- Maintain the security and stability of our products and services
You may choose not to opt-in or disclose certain information to Cozy Bliss, but please note that some information may be needed to take advantage of some of the site’s features.
You may request that your personal information be updated or removed by contacting email@example.com. An unrevised copy of this information may be retained as necessary for legal or financial purposes.
Any user may opt-out of receiving physical or electronic mail from Cozy Bliss at any time, by emailing firstname.lastname@example.org.
CALIFORNIA RESIDENT RIGHTS
Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at email@example.com.
Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities over time and across different websites. Our Services do not support Do Not Track requests at this time.
You have the right to request certain information about our collection and use of your Personal Data over the past 12 months. We will provide you with the following information:
- The categories of Personal Data that we have collected about you.
- The categories of sources from which that Personal Data was collected.
- The business or commercial purpose for collecting or selling your Personal Data.
- The Categories of third parties with whom we have shared your Personal Data.
- The specific pieces of Personal Data that we have collected about you.
If we have disclosed your Personal Data for a business purpose over the past 12 months, we will identify the categories of Personal Data shared with each category of third party recipient.
If we have sold your Personal Data over the past 12 months, we will identify the categories of Personal Data purchased by each category of third party recipient.
You have the right to request that we delete the Personal Data that we have collected from you. Under the CCPA, this right is subject to certain exceptions: for example, we may need to retain your Personal Data to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.
Exercising Your Rights
To exercise the rights described above, you must submit a request 1) via a verified email address that confirms you are the person about whom we have collected Personal Data and 2) that describes your request in sufficient detail to allow us to understand, evaluate, and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify you and complete your request. You do not need an account to submit a Valid Request.
We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.
You may also authorize an agent (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to do, and we may request a copy of this written permission from your Authorized Agent when they make a request to exercise your rights on your behalf.
Personal Data Sales Opt-Out and Opt-In
You have the right to opt-out of the sale of your Personal Data. You can opt-out using the following methods:
- Submit a form here
- Email us at firstname.lastname@example.org
Once you have submitted an opt-out request, we will not ask you to reauthorize the sale of your Personal Data for at least 12 months. However, you may change your mind and opt back into Personal Data sales at any time by emailing email@example.com.
We do not sell the Personal Data of minors under 16 years of age without affirmative authorization. If you are between 13 and 16 years of age, you must authorize us to sell your Personal Data. If you are under 13 years of age, your parent or guardian must authorize us to sell your Personal Data.
We Will Not Discriminate Against You for Exercising Your Rights Under the CCPA
We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the CCPA. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the CCPA) with varying prices, rates, or levels of quality of the goods or services you receive related to the value of Personal Data that we receive from you.
OTHER PRIVACY RIGHTS
Nevada Resident Rights
If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. You can exercise this right by contacting us at firstname.lastname@example.org with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your Personal Data as sales are defined in Nevada Revised Statutes Chapter 603A.
How Long Do We Retain Your Personal Data?
We retain Personal Data about you as long as you have an open account with us and for as long as required after your close your account, in compliance with our legal obligations, to resolve disputes or collect fees owed, or as otherwise permitted or required by applicable law, rule or regulation.
What Security Measures Do We Use?
In proportion to the sensitivity of the information, we maintain reasonable administrative, technical, and/or physical safeguards and appropriate security measures to protect Personal Information from loss, misuse or unauthorized access, disclosure, alteration, or destruction of the information you provide. However, we cannot guarantee the security of your Personal Information, as no electronic data transmission or storage of information is completely secure. If an incident is reported affecting your information, we will investigate and comply with all required reporting obligations.
What Rights Do You Have Regarding Your Personal Data?
You have certain rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please fill out this request form. Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need to you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request.
Access: You can request more information about the Personal Data we hold about you and request a copy of such Personal Data. You can also access certain of your Personal Data by emailing email@example.com and we can email or mail you the requested information.
Rectification: If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data by emailing firstname.lastname@example.org.
Erasure: You can request that we erase some or all of your Personal Data from our systems. To do so, please email us at email@example.com.
Withdrawal of Consent: If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. Please note, however, that if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your Personal Data, if such use or disclosure is necessary to enable you to utilize some or all of our Site.
Portability: You can ask for a copy of your Personal Data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.
Objection: You can contact us to let us know that you object to the further use or disclosure of your Personal Data for certain purposes.
Restriction of Processing: You can ask us to restrict further processing of your Personal Data.
Right to File Complaint: You have the right to lodge a complaint about Cozy Bliss’s practices with respect to your Personal Data with the supervisory authority of your country or EU Member State.
EU RESIDENT RIGHTS (GDPR)
For this section, we use the terms “Personal Data” and “processing” as they are defined in the GDPR, but “Personal Data” generally means information that can be used to individually identify a person, and “processing” generally covers actions that can be performed in connection with data such as collection, use, storage and disclosure. Cozy Bliss will be the controller of your Personal Data processed in connection with the Site. Note that we may also process Personal Data of our customers’ end users or employees in connection with our provision of services to customers, in which case we are the processor of Personal Data. If we are the processor of your Personal Data (i.e., not the controller), please contact the controller party in the first instance to address your rights with respect to such data.
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
Additional personal information obtained through the site will be trained for as long as you use our services or as necessary to fulfill the purpose(s) for which it was collected, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.
Our Services are not directed to children under 13 years of age, and Cozy Bliss does not knowingly collect Personally Identifiable Information from children under 13 years of age. If you learn that your child has provided us with Personal Information without your consent, you may alert us at firstname.lastname@example.org. If we learn that we have collected any Personal Information from children under 13, we will promptly take steps to delete such information and terminate the child’s Account.
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at email@example.com.
- Updated January 2021