Privacy policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit https://coziya-outdoor.com or make a purchase.

1. Personal information collected

When you visit the Site, we automatically collect information about your device (browser, IP address, time zone, cookies). When you make a purchase, we collect order information: name, billing and shipping address, payment details (processed securely), email, and phone number.

2. Cookies

We use the following technical cookies (required for the Site to function properly):

_session_id: unique Shopify session identifier.

_shopify_visit: internal analytics tracking, persists for 30 minutes.

_shopify_uniq: unique visit counting.

cart: shopping cart storage, persists for 2 weeks.

_secure_session_id: secure session identifier.

storefront_digest: store access control.

We also use third-party advertising and analytics cookies and pixels. These cookies require your prior consent through our cookie management banner (CMP):

Meta Pixel (Facebook / Instagram): advertising conversion tracking and remarketing.

TikTok Pixel: conversion tracking for TikTok campaigns.

Google Analytics: visitor behavior analysis on the Site.

Klaviyo: email and SMS marketing communications.

You can withdraw your consent at any time through the cookie manager available on our Site.

3. Use of personal information

We use the collected data to: process your orders, communicate with you, detect fraud, improve the Site, and, with your consent, send you marketing communications.

4. Sharing information with third parties

We share your data with the following service providers, strictly for the purposes described:

Shopify Inc. (store hosting): https://www.shopify.com/legal/privacy Google LLC (Google Analytics): https://policies.google.com/privacy — opt out: https://tools.google.com/dlpage/gaoptout Meta Platforms Ireland Ltd (Meta Pixel): https://www.facebook.com/privacy/policy/ TikTok Technology Limited (TikTok Pixel): https://www.tiktok.com/legal/page/eea/privacy-policy/en Klaviyo Inc. (email & SMS marketing): https://www.klaviyo.com/legal/privacy-notice

These providers act as data processors and are contractually required to maintain the confidentiality and security of your data. We may also share your data to comply with legal obligations.

5. Data transfers outside the European Union

Some of our service providers (Shopify, Google, Meta, TikTok, Klaviyo) are based in the United States and Canada. These transfers are governed by appropriate safeguards in accordance with the GDPR, including:

Standard Contractual Clauses (SCCs) adopted by the European Commission. The EU-US Data Privacy Framework (DPF) for transfers to the United States, where the provider is certified.

You can obtain a copy of these safeguards by contacting us at: contact@coziya-outdoor.com.

6. Behavioral advertising

We use your data to show you targeted advertisements. You can manage your preferences through:

Facebook / Instagram: https://www.facebook.com/settings/?tab=ads Google: https://www.google.com/settings/ads/anonymous TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/en Digital Advertising Alliance: https://optout.aboutads.info/

7. "Do Not Track" signal

We do not alter our data collection practices when we detect a "Do Not Track" signal from your browser.

8. Your rights (European residents)

Under the GDPR (EU 2016/679), you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), withdrawal of consent (Art. 13-2c), restriction (Art. 18), objection (Art. 21), and data portability (Art. 20).

To exercise these rights, contact us at contact@coziya-outdoor.com or by mail at COZIYA OUTDOOR LLC, 5830 E 2ND ST, STE 7000 #22031, CASPER, WY 82609, USA (please include a copy of your ID). You may also file a complaint with the CNIL: https://www.cnil.fr/fr/plaintes.

9. Data retention

We retain your order data for as long as necessary for the purposes described or in accordance with applicable legal obligations (generally 5 years for accounting data). You can request the deletion of your data by contacting us.

10. Security

We use standard security measures (firewalls, encryption, pseudonymization, passwords). In the event of a confirmed data breach, we will notify the CNIL within 72 hours and inform affected users as soon as possible, in accordance with Article 33 of the GDPR.